Skip to content

"index.php" is still exposed by the Server class #98

@jtickle

Description

@jtickle

I have a feeling this is going to require some serious changes but we have got to completely eliminate 'index.php' from URLs the user can see and under every possible circumstance, prevent developers from ever exposing a URL that involves a query string passed directly to index.php.

To reproduce, call \Server::getCurrentUrl() when the current URL is /. It returns /index.php, it should return /.

Additionally, if a request is made directly to index.php.... I'm not sure how we handle this; forcing a redirect to / could confuse some people with misconfigured servers. I think that once we have "modes" implemented: in dev mode, it should report an error, but in production mode, it should 302 to /.

┆Issue is synchronized with this Asana task

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions