On Tue, Sep 25, 2012 at 11:28 AM, Tom Hutchison tom@hutch4.us wrote:
Wondering if anyone else has run into this. Clicking on the edit link in a portal styled page which uses the magic word, {{fullurl}} like this, [{{fullurl:{{{editpage|/}}}|..**. Seems as if some are DNS'ing back to this wiki and the actual link when hovered over the word "edit" is resolving back to parasite domain names. Even shows still logged in, perfect mirror.
Question is what is {{fullurl}} pulling its information from, the ip address? If so it would explain a DNS back to wrong domain if the look up hits the wrong domain first.
The protocol and domain will come from $wgServer.
If you haven't set it explicitly, $wgServer is autodetected from various environment information, which may include the HTTP 'Host' header.
This is potentially unsafe if your web server configuration doesn't validate the Host header and allows any value through -- for instance if you're not using name-based virtual hosts.
Consider fixing your web server configuration or set $wgServer explicitly to the correct canonical value.
-- brion