Help - Search - Members - Calendar
Full Version: HTTP_REFERER is not localhost. but ''.
The Uniform Server BBoard > Support > Uniform Server - Windows > MySQL
Acoustik
I have seen the other threads on this topic under version 3.2, and the solution was to upgrade to 3.3. Well, I have 3.3 installed on a USB Drive, and have run on 2 seperate machines and get the following error on both. Any ideas?

» Security Alert!
Possible Attack
HTTP_REFERER is not localhost. but ''.

To disable this warning go: /home/admin/www/cgi-bin/secure.pm
AlleyKat
Have you tried reading the file? You can disable it there...
Acoustik
Thanks for the quick reply.

Actually yes, I should have mentioned that. I have commented out all lines in the file per instructions, and restarted the server. No change.

Both machines have had MySQL installed at one time as development servers. I uninstalled after setting up UniServer so that my development can be portable. I could swear that MySQL worked on UniServer before uninstalling from one of the PCs. I shut down the db server on the PC and then started from Uniserver. After uninstall on the PC, no luck.

QUOTE(AlleyKat @ Mar 17 2006, 06:50 AM)
Have you tried reading the file? You can disable it there...
*

bleek
QUOTE(Acoustik @ Mar 16 2006, 11:40 PM)
I have seen the other threads on this topic under version 3.2, and the solution was to upgrade to 3.3.  Well, I have 3.3 installed on a USB Drive, and have run on 2 seperate machines and get the following error on both.  Any ideas?

» Security Alert!
Possible Attack
HTTP_REFERER is not localhost. but ''.

To disable this warning go: /home/admin/www/cgi-bin/secure.pm
*



I have had the same problem, but I figured a way around it. I commented out the security check. I commented out the top line that says

require secure;

with a #require secure;

Then, I just restarted mysql and it worked. Make sure you comment it out on all the files that require a security check, mainly

rmysql.cgi
rserver.cgi
dserver.cgi
smysql.cgi
sserver.sgi

But this will pose a security risk unless you make sure you only give access to your ip, 127.0.0.1, in the .htaccess file and deny every other ip address.
Acoustik
Thank you Bleek. Your suggestion did the trick on my home system.

Now, I still have to troubleshoot my "locked down" system here at work. Even though the machine shows that I have admin rights, I know that is not fully the case. I will try reinstalling Apache and MySQL as services on the machine, shut down the services, and then retry running from the USB, so as to recreate the working setup prior to uninstallation of services.

UPDATE: Not sure exactly why this makes a difference, but after reinstalling Apache as a service on the base PC, additional issues seem to have been resolved.

I shut down the Apache instance on the PC, start the Uniserver on the USB and all functions are not working.

Thanks all!
olajideolaolorun
sad.gif Didn't make it in time for the action...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.