Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non standard web port breaking AdminLTE #279

Closed
wants to merge 2 commits into from
Closed

Conversation

cbgta
Copy link

@cbgta cbgta commented Dec 22, 2016

The code that generates the $AUTORIZED_HOSTNAMES array does not account for installations that deviate from the standard web port of your browser when checking for host header spoofing.

My browser is asking for "192.168.1.100:31415", but Pi-hole only checks for "192.168.1.100" and the check fails and the user can never access the admin panel.

Example error message: "Failed Host Check: 192.168.1.100:31415 vs http://192.168.1.100, http://192.168.1.100, http://pi.hole, http://localhost"

This is easily reproducible by changing the lighttpd default port.

@pi-hole/dashboard

PromoFaux and others added 2 commits December 21, 2016 18:22
Pi-Hole Web Admin Release v2.0
When you install Pi-hole and you run it on a non standard port, the host header check fails. My browser is asking for "192.168.1.100:31415", but Pi-hole only checks for "192.168.1.100" and the check fails and the user can never access the admin panel.

Example error message: "Failed Host Check: 192.168.1.100:31415 vs http://192.168.1.100, http://192.168.1.100, http://pi.hole, http://localhost"

This is easily reproducible by changing the lighttpd default port.
@CLAassistant
Copy link

CLAassistant commented Dec 22, 2016

CLA assistant check
All committers have signed the CLA.

@dschaper
Copy link
Member

Please edit your PR and pull against Development, and also fill out the template that is provided when you initiate a PR request. Thank you.

@cbgta cbgta changed the base branch from master to devel December 22, 2016 01:57
@cbgta
Copy link
Author

cbgta commented Dec 22, 2016

Sorry, lost the template. Its now pulled against devel.

Here is the forum thread with the problem: https://discourse.pi-hole.net/t/how-do-i-install-pi-hole-on-a-synology-nas/289/46

@AzureMarker
Copy link
Contributor

This has actually already been fixed in dev. #275

@DL6ER DL6ER mentioned this pull request Dec 22, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants