Message "Opening index.php"

[Nicolas Vervelle]

Am I the only one getting message box to save pages instead of
displaying them from time to time ?

It is as if from time to time, the page is considered as a file to download.

Message box title: "Opening index.php"
Message box content:
You have chosen to open index.php which is a PHP file from
http://fahwiki.net
What sould Firefox do with this file?
- Open with ...
- Save to disk

This problem was also occuring with the previous server.

I am wondering if it couldn't be a security breach for the Wiki since
apparently there's a possibility to download PHP files.

Nico

[Andrew Schofield]

I've not noticed it on the wiki, but I have noticed it with several other websites. Does firefox actually download the php file, or the parsed output?

[Clodoaldo]

2006/12/3, Nicolas Vervelle <nver...@numericable.fr>:

The MIME type is wrong somewhere. The server could be sending it wrong
or your system is getting it wrong or some proxy is changing it on the
way.

If you choose to open or download do you see PHP code or the html source?

--
Clodoaldo Pinto Neto

[Nicolas Vervelle]

Andrew Schofield wrote:

I've not noticed it on the wiki, but I have noticed it with several other websites. Does firefox actually download the php file, or the parsed output?

I don't notice this on other wikis (wikipedia, jmol wiki, ...), only here, and quite often.
It seems to download the http responses (neither the php file or the parsed output), see the attached file I got instead of the "All pages" page.

[Bas Couwenberg]

The output is probably the HTML of the normal response, it just looks
weird because it is gzip encoded.

Try: gunzip Special-Allpages
to uncompress the file, and read the normal text.

On 12/3/06, Nicolas Vervelle <nver...@numericable.fr> wrote:
>
>
> Andrew Schofield wrote:
> I've not noticed it on the wiki, but I have noticed it with several other
> websites. Does firefox actually download the php file, or the parsed output?
> I don't notice this on other wikis (wikipedia, jmol wiki, ...), only here,
> and quite often.
> It seems to download the http responses (neither the php file or the parsed
> output), see the attached file I got instead of the "All pages" page.
>
>
>
>
>
> On 12/3/06, Nicolas Vervelle <nver...@numericable.fr> wrote:
> >
> > Am I the only one getting message box to save pages instead of
> > displaying them from time to time ?
> >
> > It is as if from time to time, the page is considered as a file to
> download.
> >
> > Message box title: "Opening index.php"
> > Message box content:
> > You have chosen to open index.php which is a PHP file from
> > http://fahwiki.net
> > What sould Firefox do with this file?
> > - Open with ...
> > - Save to disk
> >
> > This problem was also occuring with the previous server.
> >
> > I am wondering if it couldn't be a security breach for the Wiki since
> > apparently there's a possibility to download PHP files.
> >
> > Nico
> >
> >
>
>
>
>

--
Disclaimer: Any errors in spelling, tact, or fact are transmission errors.

[Nicolas Vervelle]

Bas Couwenberg wrote:
>
> The output is probably the HTML of the normal response, it just looks
> weird because it is gzip encoded.
>
> Try: gunzip Special-Allpages
> to uncompress the file, and read the normal text.

Doesn't work, probably because there's also the HTTP header in the
downloaded file:

HTTP/1.1 200 OK
Date: Sun, 03 Dec 2006 20:11:07 GMT
Server: Apache/2.2.3 (Fedora)
X-Powered-By: PHP/5.1.6
Content-language: en
Vary: Accept-Encoding,Cookie
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: private, must-revalidate, max-age=0
Content-Encoding: gzip
Keep-Alive: timeout=30, max=999
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

[Clodoaldo]

2006/12/3, Nicolas Vervelle <nver...@numericable.fr>:

>
> Am I the only one getting message box to save pages instead of
> displaying them from time to time ?
>
> It is as if from time to time, the page is considered as a file to download.
>
> Message box title: "Opening index.php"
> Message box content:
> You have chosen to open index.php which is a PHP file from
> http://fahwiki.net
> What sould Firefox do with this file?
> - Open with ...
> - Save to disk
>

Nico, could you install the Live http Headers extension for Firefox
and show what are the request headers FF is sending to the server when
requesting the offending page? This way I could try to reproduce the
problem here.

http://livehttpheaders.mozdev.org/

--
Clodoaldo Pinto Neto

[Nicolas Vervelle]

Hi,

I just installed it, it took me several pages viewing to get the
problem, but I got it again.
Attached is the full trace captured in FF. I saved the trace when I had
the dialog box asking me to save the file.

Hope this helps
Nico

[Clodoaldo]

2006/12/5, Nicolas Vervelle <nver...@numericable.fr>:

I still can't reproduce it but I noted there are antivirus headers in
the response for some files:

X-Antivirus: avast! 4
X-Antivirus-Status: Clean

Is this antivirus in your machine or in a proxy you use to access the
internet? If it is in your machine could you disable it and try to
reproduce the problem? The antivirus could be messing the response in
some conditions.

--
Clodoaldo Pinto Neto

[Nicolas Vervelle]

Clodoaldo wrote:
>
> I still can't reproduce it but I noted there are antivirus headers in
> the response for some files:
>
> X-Antivirus: avast! 4
> X-Antivirus-Status: Clean
>
> Is this antivirus in your machine or in a proxy you use to access the
> internet? If it is in your machine could you disable it and try to
> reproduce the problem? The antivirus could be messing the response in
> some conditions.
>

The antivirus is on my machine.

Currently, I don't have the problem any more (with or without the
antivirus).
But, something else changed with the wiki at approximatively the same
time: the wiki is now a lot faster than before.

If the problem happens again, I will try disabling the antivirus to see
if something is different.

Nico

[Clodoaldo]

2006/12/8, Nicolas Vervelle <nver...@numericable.fr>:

>
> Clodoaldo wrote:
> >
> > I still can't reproduce it but I noted there are antivirus headers in
> > the response for some files:
> >
> > X-Antivirus: avast! 4
> > X-Antivirus-Status: Clean
> >
> > Is this antivirus in your machine or in a proxy you use to access the
> > internet? If it is in your machine could you disable it and try to
> > reproduce the problem? The antivirus could be messing the response in
> > some conditions.
> >
> The antivirus is on my machine.
>
> Currently, I don't have the problem any more (with or without the
> antivirus).
> But, something else changed with the wiki at approximatively the same
> time: the wiki is now a lot faster than before.

I didn't change anything. It has always been very fast for me.

>
> If the problem happens again, I will try disabling the antivirus to see
> if something is different.
>

Ok. Let me know about it.

Since your session ID was published with the headers you had better
logout, delete the wiki cookie and login again to change it.

--
Clodoaldo Pinto Neto