On Tue, Sep 25, 2012 at 11:28 AM, Tom Hutchison <tom(a)hutch4.us> wrote:
Wondering if anyone else has run into this. Clicking
on the edit link in a
portal styled page which uses the magic word, {{fullurl}} like this,
[{{fullurl:{{{editpage|/}}}|..**. Seems as if some are DNS'ing back to
this wiki and the actual link when hovered over the word "edit" is
resolving back to parasite domain names. Even shows still logged in,
perfect mirror.
Question is what is {{fullurl}} pulling its information from, the ip
address? If so it would explain a DNS back to wrong domain if the look up
hits the wrong domain first.
The protocol and domain will come from $wgServer.
If you haven't set it explicitly, $wgServer is autodetected from various
environment information, which may include the HTTP 'Host' header.
This is potentially unsafe if your web server configuration doesn't
validate the Host header and allows any value through -- for instance if
you're not using name-based virtual hosts.
Consider fixing your web server configuration or set $wgServer explicitly
to the correct canonical value.
-- brion