Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-68125

Prevent upgrade "Undefined property $reverseproxyignore" notice

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      1) Setup pre upgrade config conditions. Run the following:

      php admin/cli/cfg.php --name=getremoteaddrconf --set=1
      		 
      php admin/cli/cfg.php --name=reverseproxyignore --unset

      2) Test file:  remoteip.php (create it @ the site dirroot):

      <?php
      		 
       
      		 
      require('config.php');
      		 
      echo getremoteaddr()."\n";

      3) Ensure that you have "debug" set to developer level enabled and "debugdisplay" also enabled (admin settings).

      4) Test curl and confirm you did NOT get this error (but just "1.2.3.4"):

      $ curl http://your.moodle.site/remoteip.php -H 'X-Forwarded-For: 1.2.3.4'
      <br />
      <b>Notice</b>: Undefined property: stdClass::$reverseproxyignore in <b>/var/www/moodle.local/lib/moodlelib.php</b> on line <b>9211</b><br />
      <br />
      <b>Notice</b>: Undefined property: stdClass::$reverseproxyignore in <b>/var/www/moodle.local/lib/moodlelib.php</b> on line <b>9211</b><br />
      1.2.3.4

       

      Show
      1) Setup pre upgrade config conditions. Run the following: php admin/cli/cfg.php --name=getremoteaddrconf --set=1 php admin/cli/cfg.php --name=reverseproxyignore --unset 2) Test file:  remoteip.php (create it @ the site dirroot): <?php   require('config.php'); echo getremoteaddr()."\n"; 3) Ensure that you have "debug" set to developer level enabled and "debugdisplay" also enabled (admin settings). 4) Test curl and confirm you did NOT get this error (but just "1.2.3.4"): $ curl http://your.moodle.site/remoteip.php -H 'X-Forwarded-For: 1.2.3.4' <br /> <b>Notice</b>: Undefined property: stdClass::$reverseproxyignore in <b>/var/www/moodle.local/lib/moodlelib.php</b> on line <b>9211</b><br /> <br /> <b>Notice</b>: Undefined property: stdClass::$reverseproxyignore in <b>/var/www/moodle.local/lib/moodlelib.php</b> on line <b>9211</b><br /> 1.2.3.4  
    • Difficulty:
      Easy
    • Affected Branches:
      MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE, MOODLE_38_STABLE, MOODLE_39_STABLE
    • Fixed Branches:
      MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE, MOODLE_38_STABLE
    • Pull from Repository:
    • Pull 3.5 Branch:
      MDL-68125-regression-MOODLE_35_STABLE
    • Pull 3.5 Diff URL:
    • Pull 3.8 Branch:
      MDL-68125-regression-MOODLE_38_STABLE
    • Pull 3.8 Diff URL:
    • Pull Master Branch:
      MDL-68125-regression
    • Pull Master Diff URL:

      Description

      This is a fix for a little regression introduced @ MDL-67861. Applies to all current branches (35 and up).

      When these conditions happen:

      • The site has debugging set to high levels + display errors enabled.
      • The site has the handling of X-Forwarded-For headers enabled.
      • There are some headers coming in the requests.
      • The site is upgraded via web (CLI is immune to this).

      This notice is shown in the initial 3-4 pages (login, env, db upgrade...) until the new settings are saved to DB (then the notice disappears forever):

      Notice: Undefined property: stdClass::$reverseproxyignore in /opt/app/lib/moodlelib.php on line 9210"

      So, this issue is about to avoid that notice to be shown, just that.

      In the original issue, a simple change was proposed, FYC:

      Maybe we can just change:

      return !\core\ip_utils::is_ip_in_subnet_list($ip, $CFG->reverseproxyignore, ',');

      by

      return !\core\ip_utils::is_ip_in_subnet_list($ip, $CFG->reverseproxyignore ?? '', ',');

      And that's all. Note the notice doesn't lead to any malfunctioning, it's just "ugly" for the sites matching all the conditions above.

      CORRECTION TAKE#2 : Striking-through the previous -CORRECTION: it breaks login, so makes it imossible to upgrade sites through the Web UI.-

      Ciao

        Attachments

          Activity

            People

            Assignee:
            brendanheywood Brendan Heywood
            Reporter:
            stronk7 Eloy Lafuente (stronk7)
            Peer reviewer:
            Dan Marsden
            Integrator:
            Eloy Lafuente (stronk7)
            Tester:
            Janelle Barcega
            Participants:
            Component watchers:
            Andrew Nicols, Dongsheng Cai, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze, Matteo Scaramuccia, Andrew Nicols, Dongsheng Cai, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
            Votes:
            3 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              11/May/20

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 35 minutes
                35m