WordPress: Enable Sending Referrers:修订间差异

来自站长百科
跳转至: 导航、​ 搜索
(新页面: Your WordPress installation checks '''sending referrers''' as a basic form of security to protect your admin area from unauthorized users; disabling it in your WP install would be a bad i...)
 
无编辑摘要
第1行: 第1行:
Your WordPress installation checks '''sending referrers''' as a basic form of security to protect your admin area from unauthorized users; disabling it in your WP install would be a bad idea.
Your WordPress installation checks '''sending referrers''' as a basic form of security to protect your admin area from unauthorized users; disabling it in your WP install would be a bad idea.


你的WordPress安装核查'''发送 referrers''',作为防止未被授权的用户侵犯你的管理界面,一种基本的安全保护形式;在WP安装中,取消核查'''发送 referrers''',是很不好的。


== How Does It Work? WordPress 2.0.2- ==


== How Does It Work? WordPress 2.0.2- ==
== 这是怎样运行的? WordPress 2.0.2- ==


<p id="How_Does_It_Work.3F">Whenever you want to write a new post, make changes to your blog's layout, or perform any other administrative task, WordPress requires you to log in to a protected admin area. (You log in by submitting the user name and password given to you at the end of installation.) '''The log in acts as a basic security measure''', protecting your blog's admin options from being accessed by unauthorized users.</p>
<p id="How_Does_It_Work.3F">Whenever you want to write a new post, make changes to your blog's layout, or perform any other administrative task, WordPress requires you to log in to a protected admin area. (You log in by submitting the user name and password given to you at the end of installation.) '''The log in acts as a basic security measure''', protecting your blog's admin options from being accessed by unauthorized users.</p>
<p id="这_是_怎样_运行的。3F">当你写一篇文章,使你的博客的布局发生变化,或者执行任何其它的管理任务的时候,WordPress要求你登录到一个受到保护的管理界面。(你通过安装后期得到了的用户名和密码,登录到管理界面。)'''登录是基本的安全举措''', 防止为被授权的用户使用你的博客的管理选项。</p>


Once WordPress has identified you as an authorized user with permission to make changes, you can access any of the protected admin options. All the pages within the admin area remain secure, without the nuisance of your having to log in to each page individually. '''Any additional admin page you choose can verify your status by checking to see which page you just came from.'''
Once WordPress has identified you as an authorized user with permission to make changes, you can access any of the protected admin options. All the pages within the admin area remain secure, without the nuisance of your having to log in to each page individually. '''Any additional admin page you choose can verify your status by checking to see which page you just came from.'''
WordPress一旦识别了你是一个经过授权的用户,拥有权限来做出更改,你就可以使用任何经过保护的管理选项。管理界面中所有的网页都是安全的,不用麻烦你单个地登录每个网页。'''你选择的任何其它的管理网页,可以通过查看你是来自哪个网页的,来任何你的身份级别。'''


It does this by checking the '''referrer''' that the browser passes to it.
It does this by checking the '''referrer''' that the browser passes to it.
通过检查浏览器向它传送的'''referrer''',可以实现上述的步骤。


As an example, let's say you are on the main page at [http://www.wordpress.org www.wordpress.org] and you click the link to '''Get Firefox'''. Although you can't see it, when you get to the Firefox page, the browser tells the new page ''which page you just came from''. This information is called the ''''referrer'''.' If you have any sort of statistics program or script that monitors traffic to your site, the information it reports to you has been compiled from the referrers.
As an example, let's say you are on the main page at [http://www.wordpress.org www.wordpress.org] and you click the link to '''Get Firefox'''. Although you can't see it, when you get to the Firefox page, the browser tells the new page ''which page you just came from''. This information is called the ''''referrer'''.' If you have any sort of statistics program or script that monitors traffic to your site, the information it reports to you has been compiled from the referrers.
作为一个例子,加入你在主页[http://www.wordpress.org www.wordpress.org]上,而且你点击链接连接到'''得到Firefox'''。虽然你看不见Firefox,当你来到Fifefox网页的时候,浏览器会通知新的网页''你来自哪个网页''。这个信息称作为''''referrer'''。'如果你有什么统计表程序或者脚本,监控器会在你的站点上通行这些程序或者脚本,它向你发送的信息,是由referrers汇编的。


Those of us who use WordPress and are familiar with its structure know where the file <tt>post.php</tt> is most likely to be on other WordPress sites, yet we can't go blogging freely across any WordPress site. Even though we know where to look for the page, if we try to access it we will be redirected. This happens because the referrer information the browser supplies to the page shows that you have not successfully logged in.
Those of us who use WordPress and are familiar with its structure know where the file <tt>post.php</tt> is most likely to be on other WordPress sites, yet we can't go blogging freely across any WordPress site. Even though we know where to look for the page, if we try to access it we will be redirected. This happens because the referrer information the browser supplies to the page shows that you have not successfully logged in.
我们当中使用WordPress并且熟悉WordPress结构的人,知道文件<tt>post.php</tt>最可能在其它的WordPress站点的哪里出现,然而,我们不能在任何的WordPress站点上自由地写博客。即使我们知道可以在那里查找网页,如果我们试着访问这个网页,我们可能被导向了另一个网页。这样情况会发生是因为,浏览器向网页提供的referrer信息,显示你没有成功地登录进来。


== How do I Enable Sending Referrers? ==
== How do I Enable Sending Referrers? ==
== 我怎样才能够发送 Referrers? ==


Unfortunately, there may not be simple straight forward answer. Listed below are methods to enable this function, so please check both what is listed for your browser and also your firewall.
Unfortunately, there may not be simple straight forward answer. Listed below are methods to enable this function, so please check both what is listed for your browser and also your firewall.
不幸地是,关于这个问题,可能没有简单的,一目了然的答案。下面列出了一些方法,能够激活这个功能,因此请看看哪些是为你的浏览器列出的,哪些是为你的防火墙列出的。


If the program you use is not listed, study what is given for the others - the principle is the same throughout, it is just the method which differs between programs.
If the program you use is not listed, study what is given for the others - the principle is the same throughout, it is just the method which differs between programs.
如果没有列出你使用的程序,学习其他人的列出了什么-原理都是通用的,只是程序之间使用的方法会有所不同。


I had the same problem, so I went into the cpanel of my server, then to
I had the same problem, so I went into the cpanel of my server, then to
phpMyAdmin, and brought up the WordPress tables, found and edited the  
phpMyAdmin, and brought up the WordPress tables, found and edited the  
wp-options to include the /wordpress/ folder in the url.  That did the trick.
wp-options to include the /wordpress/ folder in the url.  That did the trick.
我遇到了同样的麻烦,因此我来到了我的服务器的cpanel,然后来到phpMyAdmin,然后找出了WordPress表格,找到并且编辑wp-选项,在url中包含/wordpress/文件夹。这样能够解决麻烦。
===Internet Explorer 6===


===Internet Explorer 6===
===Internet Explorer 6===


This can be done from the computer's Control Panel > Internet Options, or from within the browser '''Tools''' > '''Internet Options'''.
This can be done from the computer's Control Panel > Internet Options, or from within the browser '''Tools''' > '''Internet Options'''.
可以从电脑的控制面板>因特网选项,或者从浏览器内部的'''工具''' > '''因特网选项'''中实现这一点。


# Click '''Security'''.
# Click '''Security'''.
#点击'''安全'''.
# Click '''Trusted Sites''' then '''Sites'''.
# Click '''Trusted Sites''' then '''Sites'''.
#点击'''可信任的站点'''然后点击 '''站点'''。
# Add your website address in the box provided and click '''Add'''.
# Add your website address in the box provided and click '''Add'''.
#在提供的框中添加你的网站地址,然后点击'''添加'''。
# Uncheck the box that requires <tt>https</tt> verification.
# Uncheck the box that requires <tt>https</tt> verification.
#不要选中需要<tt>https</tt>确认的框。
# Click the '''Privacy''' tab (Medium is an acceptable setting on the slider, but click '''Sites''' and again enter your website address)/
# Click the '''Privacy''' tab (Medium is an acceptable setting on the slider, but click '''Sites''' and again enter your website address)/
#点击'''保密'''按钮(Medium是slider上一个可以接受的设置,但是点击'''站点''',再次地输入你的网站地址)/
# Now click '''Allow'''.
# Now click '''Allow'''.
#现在点击'''允许'''。
# Click '''Apply'''.
# Click '''Apply'''.
#点击'''应用'''。


This has only altered settings for your website and this does not otherwise affect your browsing.
This has only altered settings for your website and this does not otherwise affect your browsing.
上述只是改变了你的网站当我设置,但是没有影响你的浏览。
===Firefox 1.0+===
'''RefControl'''


===Firefox 1.0+===
===Firefox 1.0+===
第43行: 第92行:


Use the RefControl extention for Firefox:
Use the RefControl extention for Firefox:
https://addons.mozilla.org/firefox/953/
为Firefox使用 RefControl 扩展:
https://addons.mozilla.org/firefox/953/
https://addons.mozilla.org/firefox/953/


'''Manually Setting'''
'''Manually Setting'''
'''动手设置'''


<font color="red">'''Warning: this method may be considered as a privacy risk as all sites will receive referers.'''</font>  
<font color="red">'''Warning: this method may be considered as a privacy risk as all sites will receive referers.'''</font>  
<font color="red">'''警告: 这种方法可能被看做是要冒泄密的风险,因为所有的站点都会收到referrers。'''</font>


# Type <tt>about:config</tt> in the URL address bar.
# Type <tt>about:config</tt> in the URL address bar.
#在URL地址条中输入<tt>about:config</tt>。
# A large collection of alphabetically listed information will appear in the browser window.
# A large collection of alphabetically listed information will appear in the browser window.
#浏览器窗口中会出现大量的按字母顺序排列的信息。
# Search for <tt>network.http.sendRefererHeader</tt>.
# Search for <tt>network.http.sendRefererHeader</tt>.
#搜索<tt>network.http.sendRefererHeader</tt>。
# By default, this should be set at 2.
# By default, this should be set at 2.
#默认情况下,这个应该设置为2。
# If it is set to 0 - which disables sending referrers - right click it, select '''Modify''' and enter 2 as the value.
# If it is set to 0 - which disables sending referrers - right click it, select '''Modify''' and enter 2 as the value.
#如果这个设置为0-就不能给发送referrers-点击,选择'''修改''',然后输入2,作为一个值。
# If that doesn't work, try a value of 1
# If that doesn't work, try a value of 1
#如果不能够运行,尝试一下值1


See http://kb.mozillazine.org/Network.http.sendRefererHeader for more information.
See http://kb.mozillazine.org/Network.http.sendRefererHeader for more information.
更多的信息,请看看http://kb.mozillazine.org/Network.http.sendRefererHeader
===Opera===


===Opera===
===Opera===


Sending referrers is enabled by default.
Sending referrers is enabled by default.
默认情况下,就可以发送referrers。


If you have disabled it, go to '''Tools''' > '''Preferences''' > '''Privacy''' and re-enable it.
If you have disabled it, go to '''Tools''' > '''Preferences''' > '''Privacy''' and re-enable it.
如果你取消了这个操作,进入'''工具''' > '''Preferences''' > '''保密''' 使这个操作重新运行。
===K-Meleon===


===K-Meleon===
===K-Meleon===


Sending referrers is enabled by default.
Sending referrers is enabled by default.
默认情况下,可以发送referrers。


If you have disabled it, go to Tools > Privacy > Block referrers (if already checked)
If you have disabled it, go to Tools > Privacy > Block referrers (if already checked)
如果你取消了这个操作,进入工具 > 保密 > 阻止 referrers (如果已经选中的话)


===Norton Internet Security===
===Norton Internet Security===
===Norton因特网安全===


Go to '''Privacy Control''' > '''Advanced''' > '''Add Site'''.
Go to '''Privacy Control''' > '''Advanced''' > '''Add Site'''.
进入 '''保密控制''' > '''高级的''' > '''添加站点'''。


Add your URL (ie. <tt>example.com</tt>) and make sure everything is permitted.
Add your URL (ie. <tt>example.com</tt>) and make sure everything is permitted.
添加你的URL(例如<tt>example.com</tt>)要确认所有的操作都得到了准许。


===Norton Personal===
===Norton Personal===
===Norton 个人的===


Some web pages require referrer information before allowing you to view their page. If you want to allow referrer information to pass to a particular web page, you must create a rule for it.
Some web pages require referrer information before allowing you to view their page. If you want to allow referrer information to pass to a particular web page, you must create a rule for it.
有的网页需要referrer信息,才会允许你来访问站点。如果你允许referrer信息发送到一个特别的网页上,你必须为此创建一个规则。


'''To Create a Rule'''
'''To Create a Rule'''
'''创建一个规则'''


Open Norton Internet Security or Norton Personal Firewall and choose one of the following:  
Open Norton Internet Security or Norton Personal Firewall and choose one of the following:  
打开Norton 因特网安全或者Norton 个人防火墙,并且选择以下的内容:


In Norton Internet Security/Norton Personal Firewall 2003
In Norton Internet Security/Norton Personal Firewall 2003
在Norton因特网安全/Norton2003个人防火墙


# Click Options > Internet Security or  
# Click Options > Internet Security or  
#点击选项>因特网安全或者
# Personal Firewall (This step is not always needed) and click the Web Content tab
# Personal Firewall (This step is not always needed) and click the Web Content tab
#个人防火墙(并不是总是需要这个步骤)并且点击网络内容标签


In Norton Internet Security/Norton Personal Firewall 2004
In Norton Internet Security/Norton Personal Firewall 2004
在Norton个人安全/Norton2004个人防火墙


# Double-click Privacy Control
# Double-click Privacy Control
#双击保密控制
# Click Advanced
# Click Advanced
#点击高级的
# Click Add Site (A new site/domain box appears)
# Click Add Site (A new site/domain box appears)
#点击添加站点(一个新的站点/域框显示)
# Enter the name of the site that you want to receive the referrer information and click OK. In this example, it will be [http://www.symantec.com www.symantec.com]. The site name appears in the left frame of the Options window.  
# Enter the name of the site that you want to receive the referrer information and click OK. In this example, it will be [http://www.symantec.com www.symantec.com]. The site name appears in the left frame of the Options window.  
#输入你想要收到referrer信息的站点的名称并且点击OK(好)。在这个例子中,名称是[http://www.symantec.com www.symantec.com]。站点名称在选项框的左框中显示。
# Click the name of the new site  
# Click the name of the new site  
#点击新的站点的名称
# Click the Global Settings tab  
# Click the Global Settings tab  
#点击全球设置标签
# In the "Information about visited sites" section, clear "Use default settings"  
# In the "Information about visited sites" section, clear "Use default settings"  
#在"关于访问过的站点信息"部分,清除"使用默认设置"
# Click Permit  
# Click Permit  
#点击允许
# Click OK to close the Options window
# Click OK to close the Options window
#点击OK(好)来关闭选项框


[http://service1.symantec.com/SUPPORT/nip.nsf/46f26a2d6dafb0a788256bc7005c3fa3/b9b47ad7eddd343b88256c6b006a85a8?OpenDocument&prod=Norton%20Personal%20Firewall&ver=2003%20for%20Windows%202000/Me/98/XP&src=sg&pcode=npf&svy=&csm=no Norton Support Reference]
[http://service1.symantec.com/SUPPORT/nip.nsf/46f26a2d6dafb0a788256bc7005c3fa3/b9b47ad7eddd343b88256c6b006a85a8?OpenDocument&prod=Norton%20Personal%20Firewall&ver=2003%20for%20Windows%202000/Me/98/XP&src=sg&pcode=npf&svy=&csm=no Norton Support Reference]
[http://service1.symantec.com/SUPPORT/nip.nsf/46f26a2d6dafb0a788256bc7005c3fa3/b9b47ad7eddd343b88256c6b006a85a8?OpenDocument&prod=Norton%20Personal%20Firewall&ver=2003%20for%20Windows%202000/Me/98/XP&src=sg&pcode=npf&svy=&csm=no Norton 支持参考]
===Netbarrier===


===Netbarrier===
===Netbarrier===


Go to '''Privacy''' > '''Surf''' > '''Information Hiding''', and uncheck the "Last Web site visited" box.
Go to '''Privacy''' > '''Surf''' > '''Information Hiding''', and uncheck the "Last Web site visited" box.
进入'''保密''' > '''网上冲浪''' > '''信息影藏''',取消选中"最后访问的站点" 框。


===Sygate Firewall===
===Sygate Firewall===
===Sygate 防火墙===


The free version of this firewall does not block sending referrers.
The free version of this firewall does not block sending referrers.
这个防火墙的免费版本不会阻止发送referrers。


The Pro version:
The Pro version:


Pro版本:
Click '''Tools''' > '''Options''' > '''Security'''
Click '''Tools''' > '''Options''' > '''Security'''
点击'''工具''' > '''选项''' > '''安全'''


Ensure that 'enable stealth mode browsing' is unchecked.
Ensure that 'enable stealth mode browsing' is unchecked.
确保这个能够保证没有选中' stealth mode 浏览'。


===Kerio Firewall 4===
===Kerio Firewall 4===
===Kerio 防火墙 4===


Turn '''ON''' the HTTP referrer under the privacy tab of web filtering.
Turn '''ON''' the HTTP referrer under the privacy tab of web filtering.
在网络filtering 的保密标签上打'''开'''HTTP referrer。
===Zone Alarm Pro===


===Zone Alarm Pro===
===Zone Alarm Pro===


* Under '''Privacy Button on Left''', Click on Site List Tab.
* Under '''Privacy Button on Left''', Click on Site List Tab.
*在'''左边的保密按钮'''上,点击站点列表标签。
* Right click on "Private Header" column where WordPress URL is located. Or click "Add" to add the URL.
* Right click on "Private Header" column where WordPress URL is located. Or click "Add" to add the URL.
*点击WordPressURL所在的"保密标头"栏。或者点击"添加"来添加URL。
* From the menu, choose '''Options'''
* From the menu, choose '''Options'''
*从菜单上,选择'''选项'''
* On the first tab named "Cookies", remove checkmark on "third party cookies - remove private header information"
* On the first tab named "Cookies", remove checkmark on "third party cookies - remove private header information"
*在第一个标明为"Cookies"的标签上,移除"第三方 cookies – 移除保密标头信息"上的checkmark
* Click OKAY
* Click OKAY
*点击OKAY(好)


===Agnitum Outpost Firewall Pro 2008===
===Agnitum Outpost Firewall Pro 2008===
===Agnitum Outpost Firewall Pro 2008===


# Click on Settings.
# Click on Settings.
#点击设置。
# Click on Web Control.
# Click on Web Control.
#点击网络控制。
# In web control level, clic on customize and then change to allow referrers.
# In web control level, clic on customize and then change to allow referrers.
#在网络控制级别上,点击自定义,然后更改,允许referrers。
===McAfee===


===McAfee===
===McAfee===


# Right-click the red '''M''' icon.
# Right-click the red '''M''' icon.
#点击红色的'''M'''图标。
# Click '''Privacy Service'''.
# Click '''Privacy Service'''.
#点击'''保密服务'''。
# Click '''Options'''.
# Click '''Options'''.
#点击'''选项'''。
# The McAfee Privacy Service window appears. Click '''Cookies'''.
# The McAfee Privacy Service window appears. Click '''Cookies'''.
#出现了McAfee保密服务窗口。点击'''Cookies'''。
# Enter each website address from which you would like to allow cookies.
# Enter each website address from which you would like to allow cookies.
#输入每个网站地址,你在这些网址中允许cookies。
# Click '''Add'''.
# Click '''Add'''.
#点击'''添加'''。
# Once completed, close the window
# Once completed, close the window
#完成后,关闭窗口。
===Privoxy===


===Privoxy===
===Privoxy===


This might apply to other local proxy servers and ad busters. There is a "+hide-referrer" option that defaults to "forge a url" in the referral header; either disable this option in default.action (<tt>-hide-referrer</tt>) or simply place your domain in the { fragile } section of user.action. Another option is to exclude your domain from being proxied in your web browser's setings.
This might apply to other local proxy servers and ad busters. There is a "+hide-referrer" option that defaults to "forge a url" in the referral header; either disable this option in default.action (<tt>-hide-referrer</tt>) or simply place your domain in the { fragile } section of user.action. Another option is to exclude your domain from being proxied in your web browser's setings.
这个可能适用于其它的本地代理服务器和ad busters。有一个"+hide-referrer"选项,默认在referral 标头上"伪造一个 url",在default.action (<tt>-hide-referrer</tt>)上取消这个选项或者就在user.action的{ fragile }部分放置你的域。另一个选项是清除你的网络浏览器的设置中代理的域。


==Other Methods==
==Other Methods==
==其它方法==


If the methods outlined above fail to resolve the problem, there are a few other possible solutions:
If the methods outlined above fail to resolve the problem, there are a few other possible solutions:


如果上面所列的方法不能够解决问题,有一些其它可能的解决方法。
* Check CURL's library is installed
* Check CURL's library is installed
*确认安装了CURL的library
* Delete your cookies.
* Delete your cookies.
*删除你的cookies。
** This is helpful if you've recently made any changes to your path structure or domain.
** This is helpful if you've recently made any changes to your path structure or domain.
**如果你最近对你的路径结构或者域做了更改,上述的方法很有用。
* ''WP 2.0 Only'' - Delete the <tt>wp-content/cache</tt> folder. This would be necessary if you just finished [[WordPress:Moving WordPress]], since the cache retains the previous URI/URL even if changed directly in your database.
* ''WP 2.0 Only'' - Delete the <tt>wp-content/cache</tt> folder. This would be necessary if you just finished [[WordPress:Moving WordPress]], since the cache retains the previous URI/URL even if changed directly in your database.
* ''只适用于WP 2.0 Only'' –删除<tt>wp-content/cache</tt>文件夹。如果你只是完成了[[WordPress:Moving WordPress|移动WordPress]],这一步就是必要的,即使直接在你的数据库中更改了,高速缓存仍然保持了原先的URI/URL。
* Rename the <tt>.htaccess</tt> file, if it exists.
* Rename the <tt>.htaccess</tt> file, if it exists.
*如果存在<tt>.htaccess</tt>文件,给这个文件重新命名。
** Under certain configurations, <tt>mod_rewrite</tt> can interfere with database access causing WordPress to have an incorrect <tt>siteurl</tt> setting.
** Under certain configurations, <tt>mod_rewrite</tt> can interfere with database access causing WordPress to have an incorrect <tt>siteurl</tt> setting.
**在某个配置下面,<tt>mod_rewrite</tt>可以干预数据库访问,导致WordPress产生一个错误的<tt>siteurl</tt>设置。
* Verify the <tt>siteurl</tt> setting in the <tt>wp_options</tt> table of your database is set to the root folder of your WordPress installation.  
* Verify the <tt>siteurl</tt> setting in the <tt>wp_options</tt> table of your database is set to the root folder of your WordPress installation.  
*在你的数据库<tt>wp_选项</tt>表格中确认<tt>siteurl</tt>设置,设置在你的WordPress安装的根文件夹上。
**For example: you may have entered <tt><nowiki>http://example.com</nowiki></tt> as the URL which resolves correctly because of DNS but will fail as a referrer unless <tt><nowiki>http://example.com</nowiki></tt> is the <tt>siteurl</tt> in the database.
**For example: you may have entered <tt><nowiki>http://example.com</nowiki></tt> as the URL which resolves correctly because of DNS but will fail as a referrer unless <tt><nowiki>http://example.com</nowiki></tt> is the <tt>siteurl</tt> in the database.
**例如:你可能输入<tt><nowiki>http://example.com</nowiki></tt>作为URL,会正确地分解,因为除非<tt><nowiki>http://example.com</nowiki></tt>在数据库中是<tt>siteurl</tt>,否则,DNS就不会成为一个referrer。
* Subdomains may also create problems.
* Subdomains may also create problems.
*子域可能还会产生问题。
**You may have created a subdomain blog.example.com, and installed WordPress into www.example.com/blog. Under '''Options, General ''' look for the '''WordPress address (URI):''' field. Change it to read: <tt><nowiki>http://www.example.com/blog</nowiki></tt>. The '''Blog address (URI):''' field should still read <tt><nowiki>http://blog.example.com</nowiki></tt>
**You may have created a subdomain blog.example.com, and installed WordPress into www.example.com/blog. Under '''Options, General ''' look for the '''WordPress address (URI):''' field. Change it to read: <tt><nowiki>http://www.example.com/blog</nowiki></tt>. The '''Blog address (URI):''' field should still read <tt><nowiki>http://blog.example.com</nowiki></tt>
**你可能创建了一个子域blog.example.com,而且将WordPress安装进了www.example.com/blog。在'''选项, 总的 '''下面查找'''WordPress 地址 (URI):'''区。将这个URI改为:<tt><nowiki>http://www.example.com/blog</nowiki></tt>。'''博客地址 (URI):'''仍然应该读作<tt><nowiki>http://blog.example.com</nowiki></tt>

2008年6月20日 (五) 17:36的版本

Your WordPress installation checks sending referrers as a basic form of security to protect your admin area from unauthorized users; disabling it in your WP install would be a bad idea.

你的WordPress安装核查发送 referrers,作为防止未被授权的用户侵犯你的管理界面,一种基本的安全保护形式;在WP安装中,取消核查发送 referrers,是很不好的。

How Does It Work? WordPress 2.0.2-

这是怎样运行的? WordPress 2.0.2-

Whenever you want to write a new post, make changes to your blog's layout, or perform any other administrative task, WordPress requires you to log in to a protected admin area. (You log in by submitting the user name and password given to you at the end of installation.) The log in acts as a basic security measure, protecting your blog's admin options from being accessed by unauthorized users.

当你写一篇文章,使你的博客的布局发生变化,或者执行任何其它的管理任务的时候,WordPress要求你登录到一个受到保护的管理界面。(你通过安装后期得到了的用户名和密码,登录到管理界面。)登录是基本的安全举措, 防止为被授权的用户使用你的博客的管理选项。

Once WordPress has identified you as an authorized user with permission to make changes, you can access any of the protected admin options. All the pages within the admin area remain secure, without the nuisance of your having to log in to each page individually. Any additional admin page you choose can verify your status by checking to see which page you just came from.

WordPress一旦识别了你是一个经过授权的用户,拥有权限来做出更改,你就可以使用任何经过保护的管理选项。管理界面中所有的网页都是安全的,不用麻烦你单个地登录每个网页。你选择的任何其它的管理网页,可以通过查看你是来自哪个网页的,来任何你的身份级别。

It does this by checking the referrer that the browser passes to it.

通过检查浏览器向它传送的referrer,可以实现上述的步骤。

As an example, let's say you are on the main page at www.wordpress.org and you click the link to Get Firefox. Although you can't see it, when you get to the Firefox page, the browser tells the new page which page you just came from. This information is called the 'referrer.' If you have any sort of statistics program or script that monitors traffic to your site, the information it reports to you has been compiled from the referrers.

作为一个例子,加入你在主页www.wordpress.org上,而且你点击链接连接到得到Firefox。虽然你看不见Firefox,当你来到Fifefox网页的时候,浏览器会通知新的网页你来自哪个网页。这个信息称作为'referrer。'如果你有什么统计表程序或者脚本,监控器会在你的站点上通行这些程序或者脚本,它向你发送的信息,是由referrers汇编的。

Those of us who use WordPress and are familiar with its structure know where the file post.php is most likely to be on other WordPress sites, yet we can't go blogging freely across any WordPress site. Even though we know where to look for the page, if we try to access it we will be redirected. This happens because the referrer information the browser supplies to the page shows that you have not successfully logged in.

我们当中使用WordPress并且熟悉WordPress结构的人,知道文件post.php最可能在其它的WordPress站点的哪里出现,然而,我们不能在任何的WordPress站点上自由地写博客。即使我们知道可以在那里查找网页,如果我们试着访问这个网页,我们可能被导向了另一个网页。这样情况会发生是因为,浏览器向网页提供的referrer信息,显示你没有成功地登录进来。

How do I Enable Sending Referrers?

我怎样才能够发送 Referrers?

Unfortunately, there may not be simple straight forward answer. Listed below are methods to enable this function, so please check both what is listed for your browser and also your firewall.

不幸地是,关于这个问题,可能没有简单的,一目了然的答案。下面列出了一些方法,能够激活这个功能,因此请看看哪些是为你的浏览器列出的,哪些是为你的防火墙列出的。

If the program you use is not listed, study what is given for the others - the principle is the same throughout, it is just the method which differs between programs.

如果没有列出你使用的程序,学习其他人的列出了什么-原理都是通用的,只是程序之间使用的方法会有所不同。

I had the same problem, so I went into the cpanel of my server, then to phpMyAdmin, and brought up the WordPress tables, found and edited the wp-options to include the /wordpress/ folder in the url. That did the trick.

我遇到了同样的麻烦,因此我来到了我的服务器的cpanel,然后来到phpMyAdmin,然后找出了WordPress表格,找到并且编辑wp-选项,在url中包含/wordpress/文件夹。这样能够解决麻烦。

Internet Explorer 6

Internet Explorer 6

This can be done from the computer's Control Panel > Internet Options, or from within the browser Tools > Internet Options.

可以从电脑的控制面板>因特网选项,或者从浏览器内部的工具 > 因特网选项中实现这一点。

  1. Click Security.
  1. 点击安全.
  1. Click Trusted Sites then Sites.
  1. 点击可信任的站点然后点击 站点
  1. Add your website address in the box provided and click Add.
  1. 在提供的框中添加你的网站地址,然后点击添加
  1. Uncheck the box that requires https verification.
  1. 不要选中需要https确认的框。
  1. Click the Privacy tab (Medium is an acceptable setting on the slider, but click Sites and again enter your website address)/
  1. 点击保密按钮(Medium是slider上一个可以接受的设置,但是点击站点,再次地输入你的网站地址)/
  1. Now click Allow.
  1. 现在点击允许
  1. Click Apply.
  1. 点击应用

This has only altered settings for your website and this does not otherwise affect your browsing.

上述只是改变了你的网站当我设置,但是没有影响你的浏览。

Firefox 1.0+

RefControl

Firefox 1.0+

RefControl

Use the RefControl extention for Firefox: https://addons.mozilla.org/firefox/953/

为Firefox使用 RefControl 扩展: https://addons.mozilla.org/firefox/953/

Manually Setting

动手设置

Warning: this method may be considered as a privacy risk as all sites will receive referers.

警告: 这种方法可能被看做是要冒泄密的风险,因为所有的站点都会收到referrers。

  1. Type about:config in the URL address bar.
  1. 在URL地址条中输入about:config
  1. A large collection of alphabetically listed information will appear in the browser window.
  1. 浏览器窗口中会出现大量的按字母顺序排列的信息。
  1. Search for network.http.sendRefererHeader.
  1. 搜索network.http.sendRefererHeader
  1. By default, this should be set at 2.
  1. 默认情况下,这个应该设置为2。
  1. If it is set to 0 - which disables sending referrers - right click it, select Modify and enter 2 as the value.
  1. 如果这个设置为0-就不能给发送referrers-点击,选择修改,然后输入2,作为一个值。
  1. If that doesn't work, try a value of 1
  1. 如果不能够运行,尝试一下值1

See http://kb.mozillazine.org/Network.http.sendRefererHeader for more information.

更多的信息,请看看http://kb.mozillazine.org/Network.http.sendRefererHeader

Opera

Opera

Sending referrers is enabled by default.

默认情况下,就可以发送referrers。

If you have disabled it, go to Tools > Preferences > Privacy and re-enable it.

如果你取消了这个操作,进入工具 > Preferences > 保密 使这个操作重新运行。

K-Meleon

K-Meleon

Sending referrers is enabled by default.

默认情况下,可以发送referrers。

If you have disabled it, go to Tools > Privacy > Block referrers (if already checked)

如果你取消了这个操作,进入工具 > 保密 > 阻止 referrers (如果已经选中的话)

Norton Internet Security

Norton因特网安全

Go to Privacy Control > Advanced > Add Site.

进入 保密控制 > 高级的 > 添加站点

Add your URL (ie. example.com) and make sure everything is permitted.

添加你的URL(例如example.com)要确认所有的操作都得到了准许。

Norton Personal

Norton 个人的

Some web pages require referrer information before allowing you to view their page. If you want to allow referrer information to pass to a particular web page, you must create a rule for it.

有的网页需要referrer信息,才会允许你来访问站点。如果你允许referrer信息发送到一个特别的网页上,你必须为此创建一个规则。

To Create a Rule

创建一个规则

Open Norton Internet Security or Norton Personal Firewall and choose one of the following:

打开Norton 因特网安全或者Norton 个人防火墙,并且选择以下的内容:

In Norton Internet Security/Norton Personal Firewall 2003 在Norton因特网安全/Norton2003个人防火墙

  1. Click Options > Internet Security or
  2. 点击选项>因特网安全或者
  1. Personal Firewall (This step is not always needed) and click the Web Content tab
  1. 个人防火墙(并不是总是需要这个步骤)并且点击网络内容标签

In Norton Internet Security/Norton Personal Firewall 2004

在Norton个人安全/Norton2004个人防火墙

  1. Double-click Privacy Control
  2. 双击保密控制
  1. Click Advanced
  2. 点击高级的
  3. Click Add Site (A new site/domain box appears)
  4. 点击添加站点(一个新的站点/域框显示)
  5. Enter the name of the site that you want to receive the referrer information and click OK. In this example, it will be www.symantec.com. The site name appears in the left frame of the Options window.
  1. 输入你想要收到referrer信息的站点的名称并且点击OK(好)。在这个例子中,名称是www.symantec.com。站点名称在选项框的左框中显示。
  1. Click the name of the new site
  1. 点击新的站点的名称
  1. Click the Global Settings tab
  1. 点击全球设置标签
  2. In the "Information about visited sites" section, clear "Use default settings"
  1. 在"关于访问过的站点信息"部分,清除"使用默认设置"
  1. Click Permit
  2. 点击允许
  3. Click OK to close the Options window
  4. 点击OK(好)来关闭选项框


Norton Support Reference

Norton 支持参考

Netbarrier

Netbarrier

Go to Privacy > Surf > Information Hiding, and uncheck the "Last Web site visited" box.

进入保密 > 网上冲浪 > 信息影藏,取消选中"最后访问的站点" 框。

Sygate Firewall

Sygate 防火墙

The free version of this firewall does not block sending referrers. 这个防火墙的免费版本不会阻止发送referrers。


The Pro version:

Pro版本: Click Tools > Options > Security

点击工具 > 选项 > 安全

Ensure that 'enable stealth mode browsing' is unchecked.

确保这个能够保证没有选中' stealth mode 浏览'。

Kerio Firewall 4

Kerio 防火墙 4

Turn ON the HTTP referrer under the privacy tab of web filtering.

在网络filtering 的保密标签上打HTTP referrer。

Zone Alarm Pro

Zone Alarm Pro

  • Under Privacy Button on Left, Click on Site List Tab.
  • 左边的保密按钮上,点击站点列表标签。
  • Right click on "Private Header" column where WordPress URL is located. Or click "Add" to add the URL.
  • 点击WordPressURL所在的"保密标头"栏。或者点击"添加"来添加URL。
  • From the menu, choose Options
  • 从菜单上,选择选项
  • On the first tab named "Cookies", remove checkmark on "third party cookies - remove private header information"
  • 在第一个标明为"Cookies"的标签上,移除"第三方 cookies – 移除保密标头信息"上的checkmark
  • Click OKAY
  • 点击OKAY(好)

Agnitum Outpost Firewall Pro 2008

Agnitum Outpost Firewall Pro 2008

  1. Click on Settings.
  2. 点击设置。
  3. Click on Web Control.
  4. 点击网络控制。
  5. In web control level, clic on customize and then change to allow referrers.
  6. 在网络控制级别上,点击自定义,然后更改,允许referrers。

McAfee

McAfee

  1. Right-click the red M icon.
  2. 点击红色的M图标。
  1. Click Privacy Service.
  1. 点击保密服务
  1. Click Options.
  2. 点击选项
  3. The McAfee Privacy Service window appears. Click Cookies.
  4. 出现了McAfee保密服务窗口。点击Cookies
  5. Enter each website address from which you would like to allow cookies.
  1. 输入每个网站地址,你在这些网址中允许cookies。
  1. Click Add.
  1. 点击添加
  1. Once completed, close the window
  1. 完成后,关闭窗口。

Privoxy

Privoxy

This might apply to other local proxy servers and ad busters. There is a "+hide-referrer" option that defaults to "forge a url" in the referral header; either disable this option in default.action (-hide-referrer) or simply place your domain in the { fragile } section of user.action. Another option is to exclude your domain from being proxied in your web browser's setings.

这个可能适用于其它的本地代理服务器和ad busters。有一个"+hide-referrer"选项,默认在referral 标头上"伪造一个 url",在default.action (-hide-referrer)上取消这个选项或者就在user.action的{ fragile }部分放置你的域。另一个选项是清除你的网络浏览器的设置中代理的域。

Other Methods

其它方法

If the methods outlined above fail to resolve the problem, there are a few other possible solutions:

如果上面所列的方法不能够解决问题,有一些其它可能的解决方法。

  • Check CURL's library is installed
  • 确认安装了CURL的library
  • Delete your cookies.
  • 删除你的cookies。
    • This is helpful if you've recently made any changes to your path structure or domain.
    • 如果你最近对你的路径结构或者域做了更改,上述的方法很有用。
  • WP 2.0 Only - Delete the wp-content/cache folder. This would be necessary if you just finished WordPress:Moving WordPress, since the cache retains the previous URI/URL even if changed directly in your database.
  • 只适用于WP 2.0 Only –删除wp-content/cache文件夹。如果你只是完成了移动WordPress,这一步就是必要的,即使直接在你的数据库中更改了,高速缓存仍然保持了原先的URI/URL。
  • Rename the .htaccess file, if it exists.
  • 如果存在.htaccess文件,给这个文件重新命名。
    • Under certain configurations, mod_rewrite can interfere with database access causing WordPress to have an incorrect siteurl setting.
    • 在某个配置下面,mod_rewrite可以干预数据库访问,导致WordPress产生一个错误的siteurl设置。
  • Verify the siteurl setting in the wp_options table of your database is set to the root folder of your WordPress installation.
  • 在你的数据库wp_选项表格中确认siteurl设置,设置在你的WordPress安装的根文件夹上。
    • For example: you may have entered http://example.com as the URL which resolves correctly because of DNS but will fail as a referrer unless http://example.com is the siteurl in the database.
    • 例如:你可能输入http://example.com作为URL,会正确地分解,因为除非http://example.com在数据库中是siteurl,否则,DNS就不会成为一个referrer。
  • Subdomains may also create problems.
  • 子域可能还会产生问题。
    • You may have created a subdomain blog.example.com, and installed WordPress into www.example.com/blog. Under Options, General look for the WordPress address (URI): field. Change it to read: http://www.example.com/blog. The Blog address (URI): field should still read http://blog.example.com
    • 你可能创建了一个子域blog.example.com,而且将WordPress安装进了www.example.com/blog。在选项, 总的 下面查找WordPress 地址 (URI):区。将这个URI改为:http://www.example.com/blog博客地址 (URI):仍然应该读作http://blog.example.com