[mythtv-users] Securing /var/www/html loses WAP access

Fri Oct 27 04:10:58 UTC 2006

> > > Following the wiki:
> > > http://www.mythtv.org/wiki/index.php/Securing_MythWeb
> > >
> > > I secured Apache with this, and when enabled, the WAP pages no longer appear
> > > on my phone, the main full default templates appear...
> > >
> > > The security, other than the WAP problem, appears to function perfectly...
> > >
> > >
> > > <Directory "/var/www/html">
> > > Options FollowSymLinks
> > > AuthType Basic
> > > AuthName "MythTV"
> > > AuthUserFile PASSFILEHERE
> > > Require user USERNAMEHERE
> > > Order allow,deny
> > > Allow from 192.168.201.
> > > #Allow from all
> > > Satisfy Any
> > > AllowOverride None
> > > </Directory>
> > >
> > > Thoughts?
> > >
> > >
> >
> > OK, here's some more detailed information.  I took snippets of the
> > access_log from apache to see what kind of requests are going on when
> > the security is on, and when it is off.  Here's the results, nothing
> > is jumping out at me.
> >
> > No security
> >
> > <Directory "/var/www/html">
> > Options FollowSymLinks
> > #AuthType Basic
> > #AuthName "MythTV"
> > #AuthUserFile /etc/httpd-passwords
> > #Require user trey
> > Order allow,deny
> > #Allow from 192.168.201.
> > Allow from all
> > Satisfy Any
> > AllowOverride None
> > </Directory>
> >
> > 70.196.29.107 - - [25/Oct/2006:13:15:54 -0500] "GET /mythweb/
> > HTTP/1.1" 200 489 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE;
> > PPC; 240x320)"
> > 70.196.29.107 - - [25/Oct/2006:13:15:55 -0500] "GET
> > /mythweb/skins/wap/style.css HTTP/1.1" 304 -
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - - [25/Oct/2006:13:15:56 -0500] "GET
> > /mythweb/skins/wap/handheld.css HTTP/1.1" 304 -
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - - [25/Oct/2006:13:15:56 -0500] "GET
> > /mythweb/skins/wap/img/mythtv-logo.gif HTTP/1.1" 304 -
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> >
> > With Security in place
> >
> > <Directory "/var/www/html">
> > Options FollowSymLinks
> > #AuthType Basic
> > #AuthName "MythTV"
> > #AuthUserFile /etc/httpd-passwords
> > #Require user trey
> > Order allow,deny
> > #Allow from 192.168.201.
> > Allow from all
> > Satisfy Any
> > AllowOverride None
> > </Directory>
> >
> > 70.196.29.107 - - [25/Oct/2006:13:17:38 -0500] "GET /mythweb/
> > HTTP/1.1" 401 483 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE;
> > PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:39 -0500] "GET /mythweb/
> > HTTP/1.1" 200 2062 "-" "Mozilla/4.0 (compatible; MSIE 4.01; Windows
> > CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:40 -0500] "GET
> > /mythweb/js/init.js HTTP/1.1" 200 1487
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:41 -0500] "GET
> > /mythweb/js/browser.js HTTP/1.1" 200 13095
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:43 -0500] "GET
> > /mythweb/js/utils.js HTTP/1.1" 200 9299
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:44 -0500] "GET
> > /mythweb/js/mouseovers.js HTTP/1.1" 200 20406
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:46 -0500] "GET
> > /mythweb/js/visibility.js HTTP/1.1" 200 3722
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:47 -0500] "GET
> > /mythweb/js/ajax.js HTTP/1.1" 200 4792
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:48 -0500] "GET
> > /mythweb/skins/default//style.css HTTP/1.1" 200 5530
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:49 -0500] "GET
> > /mythweb/skins/default//header.css HTTP/1.1" 200 2740
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:50 -0500] "GET
> > /mythweb/skins/default//menus.css HTTP/1.1" 200 5488
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:51 -0500] "GET
> > /mythweb/skins/default//programming.css HTTP/1.1" 200 4395
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:51 -0500] "GET
> > /mythweb/skins/default//welcome.css HTTP/1.1" 200 1404
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:52 -0500] "GET
> > /mythweb/skins/default/img/mythtv-logo.png HTTP/1.1" 200 10279
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:52 -0500] "GET
> > /mythweb/skins/default/img/tv.png HTTP/1.1" 200 2936
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:53 -0500] "GET
> > /mythweb/skins/default/img/video.png HTTP/1.1" 200 2662
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:54 -0500] "GET
> > /mythweb/skins/default/img/weather.png HTTP/1.1" 200 4283
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:54 -0500] "GET
> > /mythweb/skins/default/img/settings.png HTTP/1.1" 200 4522
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> > 70.196.29.107 - trey [25/Oct/2006:13:17:54 -0500] "GET
> > /mythweb/skins/default//img/tv.png HTTP/1.1" 200 2936
> > "http://cmt.verustech.com/mythweb/" "Mozilla/4.0 (compatible; MSIE
> > 4.01; Windows CE; PPC; 240x320)"
> >
>
> Does anyone have Myth .20, password protected, WAP access working?
>

OK, so for those following, if any, I've been chasing this down
looking through PHP.  I've found this area in the init.php file:

// Reset the template?
    if ($_REQUEST['RESET_TMPL'] || $_REQUEST['RESET_TEMPLATE'])
        $_SESSION['tmpl'] = 'default';
// If the requested template is missing the welcome file, look for
other options
    else if (!file_exists(modules_path.'/_shared/tmpl/'.$_SESSION['tmpl'].'/welcome.php'))
{
    // Detect different types of browsers and set the theme accordingly.
        require_once "includes/mobile.php";
        if (isMobileUser()) {
        // Browser is mobile but does it accept HTML? If not, use the WML theme.
            if (browserAcceptsMediaType(array('text/html', '\*/\*')))
                 $_SESSION['tmpl'] = 'wap';
            else
                 $_SESSION['tmpl'] = 'wml';
        // Make sure the skin is set to the appropriate phone-template type
        /** @todo eventually, we'll put all of this in the skins section */
            $_SESSION['skin'] = $_SESSION['tmpl'];
            define('skin', $_SESSION['skin']);
        }
    // Otherwise set the default theme.
        else {
             $_SESSION['tmpl'] = 'default';
        }
    }

I thought I could FORCE it to the wap or wml template by setting the
last part to that instead of 'default', but no go.

Any thoughts?