-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On the same note.... forwarding RIGHT after a forward does not work all too 
well either...

/auth/actions/Logout.py
redirects to 'self.forward(self.request().siteRoot()'
Which hits /Main.psp,  Main.psp, using my security mixin, requires you to 
login... and redirects you to 'self.forward(self.request().siteRoot() 
+"auth/"'

Apparently the ../'s generated by self.forward() does not resolve until the 
very end of the request... So you end up with:
/auth/action/../../../../auth

So it looks like two things... the second redirect still thinks its in 
/auth/action (even though it was called from /. And in addition to this... 
the url still has the ../../ from the previous call in it. So when it tacks 
its own ../../ to try and get to the root... well you get the picture.

Note that.. in Logout.py, if I use just go directly to /auth instead of /.. it 
works as expected.

On Saturday 11 January 2003 11:03 pm, Luke Holden wrote:
> Hrm... I THOUGHT I sent an email to the list about this... but looking
> through my emails I dont actually see it... =)
>
> Anyways... Interesting problem...
>
> I have the following urls:
> /auth
> /auth/actions
> /auth/actions/Login.py
>
> When I try: 'self.forward(self.request().siteRoot() +"auth")' from
> Login.py... which generates: "../../auth"
>
> It seems to ignore the ../../ part... and I get the following error:
> The page you requested, /wk/auth/action/auth/, was not found on this
> server.
>
> However.... if I add a slash at the end.. :
> 'self.forward(self.request().siteRoot() +"auth/")'
>
> It works as expected.
>
> Maybe this was intentional? I don't know.. but its given me a LOT of grief
> =)

- -- 
Luke Holden
eBI Solutions
Main: (949) 387-5182
Email: [EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+IRao3q5xXfLZTQkRAucGAJsF60JZk4IB6143H1NqkP+tU2z4CQCfR1Qi
pIMNKG49kkb4jhLfnZbS/Kw=
=+Cmw
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Webware-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-devel

Reply via email to