PS 1.7.4.1 Apache 2.2 Wrong .htaccess mod_auth is WHITE SPACE/CASE SENSITIVE

[VictorVollcht]

For those using Apache 2.2 and installed PS 1.7.4.1, they might have discovered their frontpage is completely messed up. No images loaded, no css, and not even in the back office. After hours of desesperation trying to figure this out, I was able to narrow the problem to the .htaccess, specifically on the # Apache 2.2 directives in all .htaccess of almost all folders of PS.

 

The problem:

 File: .htaccess from /img/, or /localization/, or /themes/ etc...

# Apache 2.2
<IfModule !mod_authz_core.c>
    Order deny, allow
    Deny from all
</IfModule>

# Apache 2.4
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
 

The fix:

# Apache 2.2
<IfModule !mod_authz_core.c>
    Order Deny,Allow
    Deny from all
</IfModule>

# Apache 2.4
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
 

 

If we go to https://httpd.apache.org/docs/2.2/mod/mod_authz_host.html#order we can read:

Keywords may only be separated by a comma; no whitespace is allowed between them.

And also case-sensitive. The keywords Order Deny,Allow are wrongly written by default, ending up being Order deny, allow not allowing anything.

 

I've been manually fixing all the files, is there any method to do it automatically? I'd really like to see PS Dev Team fixing this in future versions.

I wish I had an updated apache version but my hosting won't do it for now...

 

I hope this is helpful for someone. Thank you, specially to PS for this awesome CMS.

[ksaan]

PS Dev Team has fixed this issue : https://github.com/PrestaShop/PrestaShop/pull/9339

It will be released in the incoming 1.7.4 patch version: 1.7.4.2

[ksaan]

Aaaaaand it's out  I just saw this https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.4.2

Guess it will be available soon on prestashop.com