Log in

View Full Version : Couldn't get to the forum main page


lansing
30th November 2021, 18:23
Every time I try to go to the main page, it turns into downloading of the index.php file. I can only access other pages now by the navigation dropdown at the bottom.

https://forum.doom9.org/index.php

FranceBB
30th November 2021, 20:45
Same here, since this morning, now it's back online.

nevcairiel
1st December 2021, 00:19
Being able to download the php file is worrying. I hope you can't download your config file with the passwords. Seems like quite a misconfiguration on the server still.

FranceBB
1st December 2021, 11:59
Being able to download the php file is worrying.

I found the "issue".

So basically the link to Doom9 used to be:

http://forum.doom9.org/index.php

if you click there, it will let you download index.php

Now, what changed? Well, if you now try to go to:

http://forum.doom9.org/

it will redirect you to:

https://forum.doom9.org/

so it looks like someone changed the configuration file in the server to force HTTPS.
This however breaks the old method of browsers calling the index.

I hope you can't download your config file with the passwords. Seems like quite a misconfiguration on the server still.


Probably other files are downloadable too like global.php, functions_bigthree.php, functions_forumlist.php etc, however passwords are saved on a SQL Database, so there's no way to access that...
Well, I mean, perhaps a smart enough guy might try all possible SQL commands to see if it's misconfigured too and send a SQL Injection which makes execute their own commands to get them, but that's unlikely... (also it's just speculation on my end).

lansing
2nd December 2021, 17:03
Problem fixed, nice

nevcairiel
2nd December 2021, 17:15
The problem is not fixed quite yet. https://forum.doom9.org/index.php still results in a download - and as it is, that is also the link the forum has in the top left under "Doom9's Forum", and I'm used to clicking that to go back to the index page. Oh well.

StainlessS
2nd December 2021, 18:56
The problem is not fixed quite yet. https://forum.doom9.org/index.php still results in a download - and as it is, that is also the link the forum has in the top left under "Doom9's Forum", and I'm used to clicking that to go back to the index page. Oh well.
[FireFox] That link just takes me to the forum main page, no download.
Same as the "Doom9's Forum" in pink-ish just above
"Couldn't get to the forum main page " at top of this thread.

I always have FireFox shortcut on Bookmarks Toolbar, pointing to "https://forum.doom9.org/"
(Eariler yesterday [EDIT: Day before yesterday, before Lansing thread post], I got only a blank black page for D9)

EDIT: I do have a "showthread.php" in my downloads from 30 Nov, dont know how that got there.

nevcairiel
3rd December 2021, 01:44
Seems like it was fixed since my last post, I also no longer get that behavior now.

filler56789
3rd December 2021, 08:38
..........
Well, if you now try to go to:

http://forum.doom9.org/

it will redirect you to:

https://forum.doom9.org/

so it looks like someone changed the configuration file in the server to force HTTPS.

Yeah, about time! :cool:

This however breaks the old method of browsers calling the index.

Doesn't matter. As long as the stupid-search-engine stops indexing http://forum.doom9.org, it will be okay :sly:

https://forum.doom9.org/showthread.php?t=181941

Sharc
3rd December 2021, 09:22
index-php problem persists with Edge here. Chrome is ok.