Hi, On Tue, Feb 15, 2011 at 12:20:35PM +0100, Martin Edenhofer wrote:
In other words, the string "/file-2" (which depends on the name of the attachment, of course) is mistakenly inserted between "index.pl" and "?". The reason why it has changed is, because it's a workaround for IE to support multi byte of attachment filenames.
Mmh. In our setup, this means the web server returns 500. :-(
So the new URL (https://[ServerURL]/otrs/index.pl/file-2?Action...) will execute index.pl
Erm, interesting... Our web server won't execute "index.pl" upon a request for "index.pl/something". Hm.
and for IE the file name is "file-2" (or in case a multi byte filenames) if you want to save the file. For all other browsers "/file-2" will not have any meaning because the file name is taken from http header (Content-Disposition).
Yeah, but why would the web server execute index.pl when it is told to load index.pl/something? Am I missing something obvious? Cheers, Toby. -- Why crawl through Windows when there are doors? ---- Karlsruhe Institute of Technology (KIT) KIT-CERT Tobias Dussa CERT Manager/CA Manager Zirkel 2 Building 20.21 76131 Karlsruhe, Germany !!! New phone number Phone: +49 721 608-42479 !!! New fax number Fax: +49 721 608-9-42479 Email: tobias.dussa@kit.edu Web: http://www.kit.edu/ KIT – University of the State of Baden-Wuerttemberg and National Laboratory of the Helmholtz Association