Enano CMS (1.1.x): install/web.config@f374801eb775

Sessions: fixed logout() destroying normal session (instead of elevated) if $level = USER_LEVEL_CHPREF. Possible very minor security concern: elevated sessions were not fully destroyed, so if a normal session is opened from the same IP, the elevated one may be reusable for 15 minutes.


<!-- Enano CMS - IIS7 Rewrite support (installer's test scenario) -->

<configuration>
  <configSections>
    <sectionGroup name="rewriteRules">
      <section name="rules" overrideModeDefault="Allow" />
    </sectionGroup>
  </configSections>
  <system.webServer>
    <rewrite>
      <rules>
        <rule name="Installation - test requests from installer UI">
          <match url="(.*)" ignoreCase="false" />
          <conditions>
            <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" ignoreCase="false" negate="true" />
          </conditions>
          <action type="Rewrite" url="install.php?do=modrewrite_test&amp;str={R:1}" appendQueryString="false" />
        </rule>
      </rules>
    </rewrite>
  </system.webServer>
</configuration>

author	Dan
	Mon, 03 Aug 2009 02:58:43 -0400
changeset 1071	f374801eb775
parent 930	648043f3911d
permissions	-rw-r--r--