Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Redirection back to homepage when filing up a ticket with a big template #870

Open
2 tasks done
cn1c0 opened this issue Dec 11, 2024 · 0 comments · May be fixed by #872
Open
2 tasks done

Redirection back to homepage when filing up a ticket with a big template #870

cn1c0 opened this issue Dec 11, 2024 · 0 comments · May be fixed by #872

Comments

@cn1c0
Copy link

cn1c0 commented Dec 11, 2024

Code of Conduct

  • I agree to follow this project's Code of Conduct

Is there an existing issue for this?

  • I have searched the existing issues

GLPI Version

10.0.17

Plugin version

1.21.15

Bug description

Context: I'm filling up a ticket with a template with a big HTML table inside the description of the ticket.
I fill up several cells inside the table and suddenly, I get redirected back to /front/central.php (losing all the content of the ticket I was typing).

With the browser developper mode, I noticted there is a call to https://glpi/plugins/fields/ajax/container.php?action=get_fields_html&id=1&itemtype=Ticket&items_id=0&type=dom&subtype=&input%5B_glpi_csrf_token%5D=xxx&input%5B_skip_default_actor%5D=1&input%5B_tickettemplate%5D=7&input%5B_predefined_fields%5D=very_very_long_string_here
This call fails because the URL is too long (more than 25000 characters), apache with proxy_fcgi appears to be unable to push that to PHP and it causes a redirection to the homepage /front/central.php.

I'm using one addtionnal fields block with 3 fields inside. The block is using "Insertion in the form (before save button)" type.

Relevant log output

[Tue Dec 10 17:13:01.749842 2024] [proxy_fcgi:warn] [pid 24:tid 168] [client x.x.x.x:61888] AH02536: couldn't encode envvar 'REDIRECT_QUERY_STRING' in 16384 bytes
[Tue Dec 10 17:13:01.750257 2024] [proxy_fcgi:warn] [pid 24:tid 168] [client x.x.x.x:61888] AH02536: couldn't encode envvar 'QUERY_STRING' in 16384 bytes
[Tue Dec 10 17:13:01.750500 2024] [proxy_fcgi:warn] [pid 24:tid 168] [client x.x.x.x:61888] AH02536: couldn't encode envvar 'REQUEST_URI' in 16384 bytes

Page URL

/front/ticket.form.php

Steps To reproduce

  1. Generate a ticket template with a predefined field Description content (4 tables of 10x10 cells is enough to reach the limit on apache)
  2. Go to the create ticket on /front/ticket.form.php selecting the previously Category / Template
  3. Start typing into several cells of the tables inside the ticket Description
  4. You are redirected automatically /front/central.php

Your GLPI setup information

Information about system installation and configuration
GLPI 10.0.17 ( => /var/www/html)
Installation mode: TARBALL
Current language:en_GB

Server
 
Operating system: Linux 3b6a521c835d 5.14.0-533.el9.x86_64 #​1 SMP PREEMPT_DYNAMIC Fri Nov 22 15:05:06 UTC 2024 x86_64
PHP 8.1.30 fpm-fcgi (Core, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apcu, bz2, calendar, cgi-fcgi, ctype, curl,
date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd, openssl,
pcre, pdo_mysql, pdo_sqlite, session, sockets, sodium, sqlite3, standard, tokenizer, xml, xmlreader, xmlrpc, xmlwriter, xsl,
zip, zlib)
Setup: max_execution_time="300" memory_limit="256M" post_max_size="8M" safe_mode="" session.save_handler="files"
upload_max_filesize="7M" disable_functions=""
Software: Apache ()
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0
Server Software: mariadb.org binary distribution
Server Version: 10.6.19-MariaDB-ubu2004
Server SQL Mode: STRICT_TRANS_TABLES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
Parameters: user@mariadb/glpi
Host info: mariadb via TCP/IP

PHP version (8.1.30) is supported.
Sessions configuration is OK.
Allocated memory is sufficient.
mysqli extension is installed.
Following extensions are installed: dom, fileinfo, filter, libxml, json, simplexml, xmlreader, xmlwriter.
curl extension is installed.
gd extension is installed.
intl extension is installed.
zlib extension is installed.
The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present.
Database engine version (10.6.19) is supported.
No files from previous GLPI version detected.
The log file has been created successfully.
Write access to /files/_cache has been validated.
Write access to /files/_cron has been validated.
Write access to /files has been validated.
Write access to /files/_dumps has been validated.
Write access to /files/_graphs has been validated.
Write access to /files/_lock has been validated.
Write access to /files/_pictures has been validated.
Write access to /files/_plugins has been validated.
Write access to /files/_rss has been validated.
Write access to /files/_sessions has been validated.
Write access to /files/_tmp has been validated.
Write access to /files/_uploads has been validated.

Web server root directory configuration seems safe.
Sessions configuration is secured.
OS and PHP are relying on 64 bits integers.
exif extension is installed.
ldap extension is installed.
openssl extension is installed.
Following extensions are installed: bz2, Phar, zip.
Zend OPcache extension is installed.
Following extensions are installed: ctype, iconv, mbstring, sodium.
Write access to /var/www/html/marketplace has been validated.
Timezones seems loaded in database.

GLPI constants
 
GLPI_ROOT: "/var/www/html"
GLPI_CONFIG_DIR: "/config/"
GLPI_VAR_DIR: "/files"
GLPI_LOG_DIR: "/logs"
GLPI_MARKETPLACE_DIR: "/var/www/html/marketplace"
GLPI_USE_CSRF_CHECK: "1"
GLPI_CSRF_EXPIRES: "7200"
GLPI_CSRF_MAX_TOKENS: "100"
GLPI_USE_IDOR_CHECK: "1"
GLPI_IDOR_EXPIRES: "7200"
GLPI_ALLOW_IFRAME_IN_RICH_TEXT: false
GLPI_SERVERSIDE_URL_ALLOWLIST: ["/^(https?|feed):\/\/[^@:]+(\/.*)?$/"]
GLPI_TELEMETRY_URI: "https://telemetry.glpi-project.org"
GLPI_INSTALL_MODE: "TARBALL"
GLPI_NETWORK_MAIL: "[email protected]"
GLPI_NETWORK_SERVICES: "https://services.glpi-network.com"
GLPI_MARKETPLACE_ALLOW_OVERRIDE: true
GLPI_MARKETPLACE_MANUAL_DOWNLOADS: true
GLPI_USER_AGENT_EXTRA_COMMENTS: ""
GLPI_DISABLE_ONLY_FULL_GROUP_BY_SQL_MODE: "1"
GLPI_AJAX_DASHBOARD: "1"
GLPI_CALDAV_IMPORT_STATE: 0
GLPI_DEMO_MODE: "0"
GLPI_CENTRAL_WARNINGS: "1"
GLPI_TEXT_MAXSIZE: "4000"
GLPI_DOC_DIR: "/files"
GLPI_CACHE_DIR: "/files/_cache"
GLPI_CRON_DIR: "/files/_cron"
GLPI_DUMP_DIR: "/files/_dumps"
GLPI_GRAPH_DIR: "/files/_graphs"
GLPI_LOCAL_I18N_DIR: "/files/_locales"
GLPI_LOCK_DIR: "/files/_lock"
GLPI_PICTURE_DIR: "/files/_pictures"
GLPI_PLUGIN_DOC_DIR: "/files/_plugins"
GLPI_RSS_DIR: "/files/_rss"
GLPI_SESSION_DIR: "/files/_sessions"
GLPI_TMP_DIR: "/files/_tmp"
GLPI_UPLOAD_DIR: "/files/_uploads"
GLPI_INVENTORY_DIR: "/files/_inventories"
GLPI_NETWORK_REGISTRATION_API_URL: "https://services.glpi-network.com/api/registration/"
GLPI_MARKETPLACE_PLUGINS_API_URI: "https://services.glpi-network.com/api/marketplace/"
GLPI_I18N_DIR: "/var/www/html/locales"
GLPI_VERSION: "10.0.17"
GLPI_SCHEMA_VERSION: "10.0.17@bde16719fbd4112f59a9a7d34c66c959bce73434"
GLPI_MARKETPLACE_PRERELEASES: false
GLPI_MIN_PHP: "7.4.0"
GLPI_MAX_PHP: "8.4.0"
GLPI_YEAR: "2024"

Libraries
 
htmlawed/htmlawed version 1.2.14 in (/var/www/html/vendor/htmlawed/htmlawed)
phpmailer/phpmailer version 6.8.0 in (/var/www/html/vendor/phpmailer/phpmailer/src)
simplepie/simplepie version 1.5.8 in (/var/www/html/vendor/simplepie/simplepie/library)
tecnickcom/tcpdf version 6.7.5 in (/var/www/html/vendor/tecnickcom/tcpdf)
michelf/php-markdown in (/var/www/html/vendor/michelf/php-markdown/Michelf)
true/punycode in (/var/www/html/vendor/true/punycode/src)
iamcal/lib_autolink in (/var/www/html/vendor/iamcal/lib_autolink)
sabre/dav in (/var/www/html/vendor/sabre/dav/lib/DAV)
sabre/http in (/var/www/html/vendor/sabre/http/lib)
sabre/uri in (/var/www/html/vendor/sabre/uri/lib)
sabre/vobject in (/var/www/html/vendor/sabre/vobject/lib)
laminas/laminas-i18n in (/var/www/html/vendor/laminas/laminas-i18n/src)
laminas/laminas-servicemanager in (/var/www/html/vendor/laminas/laminas-servicemanager/src)
monolog/monolog in (/var/www/html/vendor/monolog/monolog/src/Monolog)
sebastian/diff in (/var/www/html/vendor/sebastian/diff/src)
donatj/phpuseragentparser in (/var/www/html/vendor/donatj/phpuseragentparser/src/UserAgent)
elvanto/litemoji in (/var/www/html/vendor/elvanto/litemoji/src)
symfony/console in (/var/www/html/vendor/symfony/console)
scssphp/scssphp in (/var/www/html/vendor/scssphp/scssphp/src)
laminas/laminas-mail in (/var/www/html/vendor/laminas/laminas-mail/src/Protocol)
laminas/laminas-mime in (/var/www/html/vendor/laminas/laminas-mime/src)
rlanvin/php-rrule in (/var/www/html/vendor/rlanvin/php-rrule/src)
ramsey/uuid in (/var/www/html/vendor/ramsey/uuid/src)
psr/log in (/var/www/html/vendor/psr/log/Psr/Log)
psr/simple-cache in (/var/www/html/vendor/psr/simple-cache/src)
psr/cache in (/var/www/html/vendor/psr/cache/src)
league/csv in (/var/www/html/vendor/league/csv/src)
mexitek/phpcolors in (/var/www/html/vendor/mexitek/phpcolors/src/Mexitek/PHPColors)
guzzlehttp/guzzle in (/var/www/html/vendor/guzzlehttp/guzzle/src)
guzzlehttp/psr7 in (/var/www/html/vendor/guzzlehttp/psr7/src)
glpi-project/inventory_format in (/var/www/html/vendor/glpi-project/inventory_format/lib/php)
wapmorgan/unified-archive in (/var/www/html/vendor/wapmorgan/unified-archive/src)
paragonie/sodium_compat in (/var/www/html/vendor/paragonie/sodium_compat/src)
symfony/cache in (/var/www/html/vendor/symfony/cache)
html2text/html2text in (/var/www/html/vendor/html2text/html2text/src)
symfony/css-selector in (/var/www/html/vendor/symfony/css-selector)
symfony/dom-crawler in (/var/www/html/vendor/symfony/dom-crawler)
twig/twig in (/var/www/html/vendor/twig/twig/src)
twig/string-extra in (/var/www/html/vendor/twig/string-extra)
symfony/polyfill-ctype not found
symfony/polyfill-iconv not found
symfony/polyfill-mbstring not found
symfony/polyfill-php80 not found
symfony/polyfill-php81 not found
symfony/polyfill-php82 in (/var/www/html/vendor/symfony/polyfill-php82)
league/oauth2-client in (/var/www/html/vendor/league/oauth2-client/src/Provider)
league/oauth2-google in (/var/www/html/vendor/league/oauth2-google/src/Provider)
thenetworg/oauth2-azure in (/var/www/html/vendor/thenetworg/oauth2-azure/src/Provider)

Plugins list
 
fields Name: Champs supplémentaires Version: 1.21.15 State: Enabled
Install Method: Manual
behaviors Name: Comportements Version: 2.7.3 State: Enabled
Install Method: Manual
datainjection Name: Data Injection Version: 2.14.0 State: Enabled
Install Method: Manual

Anything else?

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant