DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.
  • Search Forums
    Advanced Search
Prev
Next
Forums Using DNN Platform Administration and Configuration

Issue with lowercase urls and redirects to secure assets after login

 5 Replies
 1 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Author
Messages
Sytske
New Around Here
Posts: 26
New Around Here
3/9/2023 10:37 AM

Hello, 

We are encountering an issue with access to secure assets, within a website that has the setting 'Convert URLs to Lowercase' switched on (DNN  09.11). I was wondering if anyone knows of a way around this. 

We have a form in the site where users can upload files. These files are stored in a Secure Folder, and links to these files are mailed to the marketing department. When one clicks such a link in the mail, one gets the login page, so far so good. But after logging in one is redirected to a 404-page. 

The cause of this is: 

  • Links to secure assets have the format: /LinkClick.aspx?fileticket=[FileTicketHere]&portal=0. 
  • But the login page redirects to /linkclick.aspx?fileticket=[filetickethere]&portal=0, due to the setting: Convert URLs to Lowercase
  • And apparently the filetickets are case sensitive....

Is there a way to prevent the lowercase conversion for secure assets? 
Or is there a way to make sure these FileTickets are always lowercase? 

Deleted User
New Around Here
Posts: 0
New Around Here
3/9/2023 11:49 AM
Hi Sytske,

Yes, in the Personabar choose SEO and then change Expressions. The first one is Prevent LOwercase... change that to:
profileUser|verificationcode|/Admin|/Host|/ctl|PasswordReset|resetToken|resume_action|popup

You may also want to check 'Do not rewrite URL.... This is what I have:
/DesktopModules/|/Providers/|/LinkClick\.aspx|/profilepic\.ashx|/DnnImageHandler\.ashx|/__browserLink/|/API/
Sytske
New Around Here
Posts: 26
New Around Here
3/9/2023 12:34 PM

Thanks for the reply.
We have exactly the same expression, at 'Do not rewrite URL...'.

So I have changed the Prevent Lowercase URL Regular Expression, to your suggestion. But I don't see the change i hoped for. I have restarted the applicaton (just to make sure). Or does it take longer to take effect? 

What i see in the address bar: 

  • I enter: www.domain.nl/LinkClick.aspx?fileticket=PlQbYorHlFM%3d&portalid=0
  • Then I end up at www.domain.nl/login?returnurl=%2flinkclick.aspx%3ffileticket%3dplqbyorhlfm%253d%26portalid%3d0

Should the returnurl also be affected by these expressions?

Thanks, Sytske

 

Deleted User
New Around Here
Posts: 0
New Around Here
3/9/2023 12:40 PM
Try to add Login also?
Sytske
New Around Here
Posts: 26
New Around Here
3/9/2023 12:51 PM
Yes! Thank you!
[code] ________00000000000___________000000000000_________ ______00000000_____00000___000000_____0000000______ ____0000000_____________000______________00000_____ ___0000000_______________0_________________0000____ __000000____________________________________0000___ __00000_____________________________________ 0000__ _00000______________________________________00000__ _00000_____________________________________000000__ __000000_________________________________0000000___ ___0000000______________________________0000000____ _____000000____________________________000000______ _______000000________________________000000________ __________00000_____________________0000___________ _____________0000_________________0000_____________ _______________0000_____________000________________ _________________000_________000___________________ _________________ __000_____00_____________________ ______________________00__00_______________________ ________________________00_________________________ [/code]
Deleted User
New Around Here
Posts: 0
New Around Here
3/9/2023 1:20 PM
Haha, big heart Thank you

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy. 
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved