- Posts: 12291
- Thank you received: 2538
Kunena 7.0.9 & Kunena 6.4.14 – Security Updates Released
The Kunena team has announce the arrival of Kunena 7.0.9 [K 7.0.9] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x./6.1.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0
Question Dreht ewig, wenn Bilder eingebunden werden
Less
More
8 years 3 months ago #202398
by rich
Important! Always create a backup before you make any changes to your website!
Replied by rich on topic Dreht ewig, wenn Bilder eingebunden werden
Damit du da nicht etwas falsch verstehst, wir können die Benutzer nicht einfach via Mail kontaktieren, wenn wir etwas wissen wollen. Die Anfrage bestand nur aus einer Rückantwort auf seinen Forumbeitrag, nachdem er geschrieben hatte, dass es an einer Servereinstellung gelegen ist. Aber anscheinend hat er das nicht mehr gelesen (oder wollte nicht mehr antworten) nachdem sein Problem gelöst war. Mehr können wir leider auch nicht machen.Reagiert evtl. dieser Benutzer jetzt auf eine Anfrage?
Important! Always create a backup before you make any changes to your website!
Please Log in or Create an account to join the conversation.
8 years 3 months ago #202399
by Mansaylon
Bye
Mansaylon
Replied by Mansaylon on topic Dreht ewig, wenn Bilder eingebunden werden
Das ist mir bewusst. Dachte jedoch, dass da evtl. intern per PN nachgefragt wurde.
Bye
Mansaylon
Please Log in or Create an account to join the conversation.
8 years 2 months ago #202530
by Mansaylon
Bye
Mansaylon
Replied by Mansaylon on topic Dreht ewig, wenn Bilder eingebunden werden
o... denke, dass ich dem Problem einen grossen Schritt näher gekommen bin.
Die beiden Seiten, welche mit den Bildern in den Beiträgen Probleme haben, laufen unter https://.
Schalte ich die https:// Umleitung im Backend aus, funktioniert es.
Somit steht nun fest. Kunena hat beim Einbinden der Grafik ein Problem, sobald man via https:// aufruft.
Jetzt stellt sich nur die Frage, wie man dies korrigieren kann, da es definitiv keine Lösung wäre, auf https:// zu verzichten.
Die beiden Seiten, welche mit den Bildern in den Beiträgen Probleme haben, laufen unter https://.
Schalte ich die https:// Umleitung im Backend aus, funktioniert es.
Somit steht nun fest. Kunena hat beim Einbinden der Grafik ein Problem, sobald man via https:// aufruft.
Jetzt stellt sich nur die Frage, wie man dies korrigieren kann, da es definitiv keine Lösung wäre, auf https:// zu verzichten.
Bye
Mansaylon
Please Log in or Create an account to join the conversation.
- WolfgangOWL
-
- Offline
- Senior Member
-
8 years 2 months ago #202532
by WolfgangOWL
Replied by WolfgangOWL on topic Dreht ewig, wenn Bilder eingebunden werden
Kunena hat kein Problem beim Einbinden mit Bildern via https.
Schalte https im Backend aus und passe deine .htaccess an:
# Muss gesetzt sein
RewriteEngine On
RewriteCond %{HTTPS} off
# Rewrite auf HTTPS:
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# Alle Seitenaufrufe ohne www. auf mit www.
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Schalte https im Backend aus und passe deine .htaccess an:
# Muss gesetzt sein
RewriteEngine On
RewriteCond %{HTTPS} off
# Rewrite auf HTTPS:
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# Alle Seitenaufrufe ohne www. auf mit www.
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Please Log in or Create an account to join the conversation.
8 years 2 months ago - 8 years 2 months ago #202536
by Mansaylon
Bye
Mansaylon
Replied by Mansaylon on topic Dreht ewig, wenn Bilder eingebunden werden
Vielen Dank
Doch es will einfach nicht.
## No directory listings
<IfModule autoindex>
IndexIgnore *
</IfModule>
## Can be commented out if causes errors, see notes above.
Options +FollowSymlinks
Options -Indexes
## Mod_rewrite in use.
RewriteEngine On
# Block any script trying to base64_encode data within the URL.
RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR]
# Block any script that includes a <script> tag in URL.
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
# Block any script trying to set a PHP GLOBALS variable via URL.
RewriteCond %{QUERY_STRING} GLOBALS(
\[|\%[0-9A-Z]{0,2}) [OR]
# Block any script trying to modify a _REQUEST variable via URL.
RewriteCond %{QUERY_STRING} _REQUEST(
\[|\%[0-9A-Z]{0,2})
# Return 403 Forbidden header and show the content of the root home page
RewriteRule .* index.php [F]
#
## End - Rewrite rules to block out some common exploits.
## Begin - Custom redirects
#
# If you need to redirect some pages, or set a canonical non-www to
# www redirect (or vice versa), place that code here. Ensure those
# redirects use the correct RewriteRule syntax and the [R=301,L] flags.
#
## End - Custom redirects
# RewriteBase /
## Begin - Joomla! core SEF Section.
#
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
#
# If the requested path and file is not /index.php and the request
# has not already been internally rewritten to the index.php script
RewriteCond %{REQUEST_URI} !^/index\.php
# and the requested path and file doesn't directly match a physical file
RewriteCond %{REQUEST_FILENAME} !-f
# and the requested path and file doesn't directly match a physical folder
RewriteCond %{REQUEST_FILENAME} !-d
# internally rewrite the request to the index.php script
RewriteRule .* index.php [L]
#
## End - Joomla! core SEF Section.
RewriteCond %{HTTPS} off
# Rewrite auf HTTPS:
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# Alle Seitenaufrufe ohne www. auf mit www.
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
## BEGIN EXPIRES CACHING - JCH OPTIMIZE ##
<IfModule mod_expires.c>
ExpiresActive on
# Perhaps better to whitelist expires rules? Perhaps.
ExpiresDefault "access plus 1 month"
# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)
ExpiresByType text/cache-manifest "access plus 0 seconds"
# Your document html
ExpiresByType text/html "access plus 0 seconds"
# Data
ExpiresByType text/xml "access plus 0 seconds"
ExpiresByType application/xml "access plus 0 seconds"
ExpiresByType application/json "access plus 0 seconds"
# Feed
ExpiresByType application/rss+xml "access plus 1 hour"
ExpiresByType application/atom+xml "access plus 1 hour"
# Favicon (cannot be renamed)
ExpiresByType image/x-icon "access plus 1 week"
# Media: images, video, audio
ExpiresByType image/gif "access plus 1 month"
ExpiresByType image/png "access plus 1 month"
ExpiresByType image/jpg "access plus 1 month"
ExpiresByType image/jpeg "access plus 1 month"
ExpiresByType video/ogg "access plus 1 month"
ExpiresByType audio/ogg "access plus 1 month"
ExpiresByType video/mp4 "access plus 1 month"
ExpiresByType video/webm "access plus 1 month"
# HTC files (css3pie)
ExpiresByType text/x-component "access plus 1 month"
# Webfonts
ExpiresByType application/x-font-ttf "access plus 1 month"
ExpiresByType font/opentype "access plus 1 month"
ExpiresByType application/x-font-woff "access plus 1 month"
ExpiresByType image/svg+xml "access plus 1 month"
ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
# CSS and JavaScript
ExpiresByType text/css "access plus 1 year"
ExpiresByType text/javascript "access plus 1 year"
ExpiresByType application/javascript "access plus 1 year"
<IfModule mod_headers.c>
Header append Cache-Control "public"
</IfModule>
</IfModule>
## END EXPIRES CACHING - JCH OPTIMIZE ##
Doch es will einfach nicht.
Warning: Spoiler!
## No directory listings
<IfModule autoindex>
IndexIgnore *
</IfModule>
## Can be commented out if causes errors, see notes above.
Options +FollowSymlinks
Options -Indexes
## Mod_rewrite in use.
RewriteEngine On
# Block any script trying to base64_encode data within the URL.
RewriteCond %{QUERY_STRING} base64_encode[^(]*\([^)]*\) [OR]
# Block any script that includes a <script> tag in URL.
RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]
# Block any script trying to set a PHP GLOBALS variable via URL.
RewriteCond %{QUERY_STRING} GLOBALS(
\[|\%[0-9A-Z]{0,2}) [OR]# Block any script trying to modify a _REQUEST variable via URL.
RewriteCond %{QUERY_STRING} _REQUEST(
\[|\%[0-9A-Z]{0,2})# Return 403 Forbidden header and show the content of the root home page
RewriteRule .* index.php [F]
#
## End - Rewrite rules to block out some common exploits.
## Begin - Custom redirects
#
# If you need to redirect some pages, or set a canonical non-www to
# www redirect (or vice versa), place that code here. Ensure those
# redirects use the correct RewriteRule syntax and the [R=301,L] flags.
#
## End - Custom redirects
# RewriteBase /
## Begin - Joomla! core SEF Section.
#
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
#
# If the requested path and file is not /index.php and the request
# has not already been internally rewritten to the index.php script
RewriteCond %{REQUEST_URI} !^/index\.php
# and the requested path and file doesn't directly match a physical file
RewriteCond %{REQUEST_FILENAME} !-f
# and the requested path and file doesn't directly match a physical folder
RewriteCond %{REQUEST_FILENAME} !-d
# internally rewrite the request to the index.php script
RewriteRule .* index.php [L]
#
## End - Joomla! core SEF Section.
RewriteCond %{HTTPS} off
# Rewrite auf HTTPS:
RewriteRule .* https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# Alle Seitenaufrufe ohne www. auf mit www.
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule .* https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
## BEGIN EXPIRES CACHING - JCH OPTIMIZE ##
<IfModule mod_expires.c>
ExpiresActive on
# Perhaps better to whitelist expires rules? Perhaps.
ExpiresDefault "access plus 1 month"
# cache.appcache needs re-requests in FF 3.6 (thanks Remy ~Introducing HTML5)
ExpiresByType text/cache-manifest "access plus 0 seconds"
# Your document html
ExpiresByType text/html "access plus 0 seconds"
# Data
ExpiresByType text/xml "access plus 0 seconds"
ExpiresByType application/xml "access plus 0 seconds"
ExpiresByType application/json "access plus 0 seconds"
# Feed
ExpiresByType application/rss+xml "access plus 1 hour"
ExpiresByType application/atom+xml "access plus 1 hour"
# Favicon (cannot be renamed)
ExpiresByType image/x-icon "access plus 1 week"
# Media: images, video, audio
ExpiresByType image/gif "access plus 1 month"
ExpiresByType image/png "access plus 1 month"
ExpiresByType image/jpg "access plus 1 month"
ExpiresByType image/jpeg "access plus 1 month"
ExpiresByType video/ogg "access plus 1 month"
ExpiresByType audio/ogg "access plus 1 month"
ExpiresByType video/mp4 "access plus 1 month"
ExpiresByType video/webm "access plus 1 month"
# HTC files (css3pie)
ExpiresByType text/x-component "access plus 1 month"
# Webfonts
ExpiresByType application/x-font-ttf "access plus 1 month"
ExpiresByType font/opentype "access plus 1 month"
ExpiresByType application/x-font-woff "access plus 1 month"
ExpiresByType image/svg+xml "access plus 1 month"
ExpiresByType application/vnd.ms-fontobject "access plus 1 month"
# CSS and JavaScript
ExpiresByType text/css "access plus 1 year"
ExpiresByType text/javascript "access plus 1 year"
ExpiresByType application/javascript "access plus 1 year"
<IfModule mod_headers.c>
Header append Cache-Control "public"
</IfModule>
</IfModule>
## END EXPIRES CACHING - JCH OPTIMIZE ##
Bye
Mansaylon
Last edit: 8 years 2 months ago by Mansaylon.
Please Log in or Create an account to join the conversation.
- WolfgangOWL
-
- Offline
- Senior Member
-
8 years 2 months ago #202544
by WolfgangOWL
Replied by WolfgangOWL on topic Dreht ewig, wenn Bilder eingebunden werden
Ich habe deine .htaccess versuchsweise bei mir installiert. Es funktioniert alles einwandfrei. Kontaktiere doch mal deinen Provider, vielleicht hat der eine Idee woran es liegen könnte.
Please Log in or Create an account to join the conversation.
Time to create page: 0.228 seconds