From cccb2472650ec0e4f92010e122b8d51ffa802630 Mon Sep 17 00:00:00 2001 From: NicoDucou Date: Fri, 8 Sep 2023 14:10:43 +0200 Subject: [PATCH] System: Security: one more indication for a missing line on how to fix an apache problem present since version 2.4.38-3 with rediction of URL with spaces not working any more - refs BT#20674 and BT#20614 --- .htaccess | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.htaccess b/.htaccess index d5078bab60..ca461c489e 100755 --- a/.htaccess +++ b/.htaccess @@ -87,6 +87,9 @@ RewriteRule ^service/(\d{1,})$ plugin/buycourses/src/service_information.php?ser RewriteRule ^lti/os$ plugin/ims_lti/outcome_service.php [L] # Deny direct access to user my files +# Note : since version 2.4.38-3 of Apache a security fix had a side effect that made redirection with space not to work. +# To fix this issue we did not have a common syntaxis but it work with one of those 2 options : +# changing at the end of the following line [QSA,L] for [QSA,L,B=\x20?] or for "[QSA,L,B= ?,BNP]" RewriteRule ^app/upload/users/([^/]+)/([^/]+)/my_files/(.*)$ main/social/download_my_files.php?user_id=$2&file=$3 [QSA,L] # Deny access