Notices by alfred (alfred@libranet.de)

Attention! The grace period of 4 weeks is almost over. I will start deleting the blocked accounts in 4 days!

libranet.de · venera.social

@silkevicious @alastor @fediphoto_lineage Honestly, I have no idea. I think it would be better if the URL for the authentication could be changed in Friendica. But I don't know if this can be done easily.

I'll ask this in the GitHub issue later today.

The old server has been shut down by the hosting provider just now.

The XMPP server isn't running yet on the new machine. I'll do that in the next days.

@silkevicious @fediphoto_lineage Ok. Thank you! That's not good. It is the Apache issue then. The webserver itself is blocking the URL. There's a workaround to allow those URLs again but the related security issue is ranked as critical (9.1/10).

So, this must be fixed in Apache or by reworking all occurrences of encoded question marks in Friendicas code.

@silkevicious @fediphoto_lineage Hmm. I just found out that this could be related to a recent security fix for the Apache webserver. The encoded "?" isn't allowed in URLs anymore. Problem is, PHP is using this in the function "urlencode()". This would be bad. 😕

Another possibility is that the Friendica addon "blockbot" is blocking the client because it is using a generic User-Agent.

For the second possibility I have changed the config of that addon now.

Could you please retry again?