Warning: This page has not been updated in over over a year and may be outdated or deprecated.
administration:security
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | Next revisionBoth sides next revision | ||
administration:security [2020/07/23 16:47] – demiankatz | administration:security [2020/08/24 17:43] – [Proxies and IP Authentication] demiankatz | ||
---|---|---|---|
Line 67: | Line 67: | ||
If you rely on IP authentication for setting VuFind permissions, | If you rely on IP authentication for setting VuFind permissions, | ||
- | Starting with VuFind 7.0.1, the config.ini [Proxy] section contains | + | Starting with VuFind 7.0.1, the config.ini [Proxy] section contains allow_forwarded_ips |
- | By default, all IP-forwarding headers are ignored, but by turning on allow_forwarded_ips, | + | By default, all IP-forwarding headers are ignored, but by turning on allow_forwarded_ips, |
If you plan to use this feature, you should install one of the many available browser plugins for editing HTTP headers, and determine exactly how your proxy behaves when receiving falsified headers. (A quick way to do to this is to var_dump the $_SERVER superglobal in a PHP script that you can access through your proxy). Based on this information, | If you plan to use this feature, you should install one of the many available browser plugins for editing HTTP headers, and determine exactly how your proxy behaves when receiving falsified headers. (A quick way to do to this is to var_dump the $_SERVER superglobal in a PHP script that you can access through your proxy). Based on this information, |
administration/security.txt · Last modified: 2024/02/20 13:09 by demiankatz