Wrong Status code on Restricted pages

  • ochope

    (@ochope)


    7 years, 3 months ago

    When a user in NOT logged in and wants to access a back-end admin page, they get redirected to a 404.

    1-The Status code is wrong. We should get a 403
    < HTTP/1.1 302 Moved Temporarily
    < Date: Tue, 26 Feb 2019 17:18:55 GMT
    < Server: Apache
    < X-Powered-By: PHP/5.3.29
    < X-Drupal-Cache: MISS
    < Expires: Sun, 19 Nov 1978 05:00:00 GMT
    < Cache-Control: no-cache, must-revalidate
    < X-Content-Type-Options: nosniff
    < Location: [login page]
    < Vary: User-Agent
    < Content-Length: 0
    < Content-Type: text/html
    HTTP/1.1 302 Found

    2-So CHROME redirects the originally requested page to the configured not found page. Even if the user is NOW logged in. The browser ignores this and calls the not found page directly as it was instructed as such by the returned 301 or 302 status code.

    Please check
    Thanks

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)

The topic ‘Wrong Status code on Restricted pages’ is closed to new replies.