Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-16250

do not set lastaccessuri when a page is requested by error as source of an image - bug on redirect after edit

    XMLWordPrintable

Details

    • Icon: Improvement Improvement
    • Resolution: Obsolete
    • Icon: Medium Medium
    • Customer request
    • 4.1.4, 4.2.0, 4.3.0alpha1
    • Misc
    • None

    Description

      It often happens that a bad css background image link can generate a request to the site homepage. In such a case, after every page, a second request is done to ezp, and this second request overwrites the lastaccessuri value stored in the user session (as it comes in a few msecs after the original pageview).

      The end result is eg. that when the user edits a content he always gets redirected to the homepage, instead of being sent back to the node's parent - but other random breackages may occur.

      I propose to alter the index.php script to not store the lastaccessuri when the http request is made for a image/css/js object.

      I think it is doable by looking at the "Accept:" http header of the request. In the case I have seen, where / was asked via css background: url, the accept headers sent by firefox clearly indicated a preference for images (pngs). If this same behavior is validated with opera, chrome, safari and ie, I think it would be a pretty safe check - no user would alter the accept-headers sent by the browser by their own will.
      I did not test this with requests sen t from flash/xhr...

      related issues: 12621 and 6344

      Attachments

        Activity

          People

            e8318ba6-e4ae-477c-9116-36c073bd11a3@accounts.ibexa.co Patrick Allaert
            72f8acac-185f-4a54-9470-a7473f50daab@accounts.ibexa.co Gaetano Giunta
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated: