0004860: File downloads via HTTPS with IE6 do not work - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update
0004860	mantisbt	other	public	2004-11-12 09:06	2005-04-18 10:22

Reporter	rogier	Assigned To	thraxisp
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	fixed
Product Version	0.19.1
Fixed in Version	1.0.0a1

Summary	0004860: File downloads via HTTPS with IE6 do not work
Description	I use apache on port 443 and PHP 4.3.8. Users with IE6 get a message that the site could not be found once they click any download link in mantis. In Mozilla is just works fine.
Tags	No tags attached.
Attached Files	file_download.php.patch (1,150 bytes) --- file_download.php.old 2005-03-24 12:20:04.983804976 +0100 +++ file_download.php.new 2005-03-24 12:18:24.764040696 +0100 @@ -6,7 +6,7 @@ # See the README and LICENSE files for details # -------------------------------------------------------- - # $Id: file_download.php,v 1.1 2005/02/10 14:06:14 mauduit Exp $ + # $Id: file_download.php,v 1.2 2005/03/24 10:38:39 mauduit Exp $ # -------------------------------------------------------- ?> <?php @@ -78,7 +78,15 @@ header( 'Content-Disposition: filename="' . file_get_display_name( $v_filename ) . '"' ); header( 'Content-Description: Download Data' ); # prevent file caching @@@ (thraxisp) we may want to suppress this for small files - header( 'Pragma: no-cache' ); + # To fix an IE bug which causes problems when downloading + # attached files via HTTPS, we disable the "Pragma: no-cache" + # command when IE is used over HTTPS. + if ($_SERVER["HTTPS"]=="on" && + preg_match("/MSIE/",$_SERVER["HTTP_USER_AGENT"])) { + # Suppress "Pragma: no-cache" header. + } else { + header( 'Pragma: no-cache' ); + } header( 'Expires: 0' ); # dump file content to the connection. file_download.php.patch (1,150 bytes)

DGtlRift 2004-11-12 14:07 reporter ~0008328	I have the same version of php and IE and every other browser works for me in 19.1-CVS Did this work with older revisions of mantis? Is this a fresh ssl config? If so, are you using virtual hosts? I'm using the plain vanilla ssl.conf that came with fedora

rogier 2004-11-13 11:14 reporter ~0008330	I'm using the put-of-the-box debian apache-ssl package. I've never used a previous version of Mantis. I'm not using virtual servers.

rkorte 2004-11-17 14:13 reporter ~0008353	Also ran into this (using 0.19.1 and SLL) after upgrading from a working 0.19.0 installation. A search of the bugtracker turned up a similar problem (0003553) which was marked as resolved in 0.19.1. However, at our site I have commented out line 79 in file file_download.php (it is the "header('Pragma: no-cache');" line) and the problem is solved. So there still seems to be a problem with cache-related headers and SLL, at least with MSIE6 on WinXP with SP2 and all the latest updates. FWIW, we are using pretty much the default ssl.conf (a default:443 virtual host).

mauduit 2005-03-24 06:26 reporter ~0009659	Had the same problem of course, however the patch suggested in bug 5039 did not statisfy me, for it altered the behavior of Mantis also for non-IE browser and for non-SSL operations. Patch follows, and also as an attached file, replaces line 81 in file_download.php: `# To fix an IE bug which causes problems when downloading # attached files via HTTPS, we disable the "Pragma: no-cache" # command when IE is used over HTTPS. if ($_SERVER["HTTPS"]=="on" && preg_match("/MSIE/",$_SERVER["HTTP_USER_AGENT"])) { # Suppress "Pragma: no-cache" header. } else { header( 'Pragma: no-cache' ); }` Thanks and have a nice day.

thraxisp 2005-03-27 15:57 reporter ~0009668	Patch applied to CVS.