WordPress:Enable Sending Referrers

来自站长百科
Fludlen讨论 | 贡献2008年6月20日 (五) 17:36的版本
跳转至: 导航、​ 搜索

Your WordPress installation checks sending referrers as a basic form of security to protect your admin area from unauthorized users; disabling it in your WP install would be a bad idea.

你的WordPress安装核查发送 referrers,作为防止未被授权的用户侵犯你的管理界面,一种基本的安全保护形式;在WP安装中,取消核查发送 referrers,是很不好的。

How Does It Work? WordPress 2.0.2-

这是怎样运行的? WordPress 2.0.2-

Whenever you want to write a new post, make changes to your blog's layout, or perform any other administrative task, WordPress requires you to log in to a protected admin area. (You log in by submitting the user name and password given to you at the end of installation.) The log in acts as a basic security measure, protecting your blog's admin options from being accessed by unauthorized users.

当你写一篇文章,使你的博客的布局发生变化,或者执行任何其它的管理任务的时候,WordPress要求你登录到一个受到保护的管理界面。(你通过安装后期得到了的用户名和密码,登录到管理界面。)登录是基本的安全举措, 防止为被授权的用户使用你的博客的管理选项。

Once WordPress has identified you as an authorized user with permission to make changes, you can access any of the protected admin options. All the pages within the admin area remain secure, without the nuisance of your having to log in to each page individually. Any additional admin page you choose can verify your status by checking to see which page you just came from.

WordPress一旦识别了你是一个经过授权的用户,拥有权限来做出更改,你就可以使用任何经过保护的管理选项。管理界面中所有的网页都是安全的,不用麻烦你单个地登录每个网页。你选择的任何其它的管理网页,可以通过查看你是来自哪个网页的,来任何你的身份级别。

It does this by checking the referrer that the browser passes to it.

通过检查浏览器向它传送的referrer,可以实现上述的步骤。

As an example, let's say you are on the main page at www.wordpress.org and you click the link to Get Firefox. Although you can't see it, when you get to the Firefox page, the browser tells the new page which page you just came from. This information is called the 'referrer.' If you have any sort of statistics program or script that monitors traffic to your site, the information it reports to you has been compiled from the referrers.

作为一个例子,加入你在主页www.wordpress.org上,而且你点击链接连接到得到Firefox。虽然你看不见Firefox,当你来到Fifefox网页的时候,浏览器会通知新的网页你来自哪个网页。这个信息称作为'referrer。'如果你有什么统计表程序或者脚本,监控器会在你的站点上通行这些程序或者脚本,它向你发送的信息,是由referrers汇编的。

Those of us who use WordPress and are familiar with its structure know where the file post.php is most likely to be on other WordPress sites, yet we can't go blogging freely across any WordPress site. Even though we know where to look for the page, if we try to access it we will be redirected. This happens because the referrer information the browser supplies to the page shows that you have not successfully logged in.

我们当中使用WordPress并且熟悉WordPress结构的人,知道文件post.php最可能在其它的WordPress站点的哪里出现,然而,我们不能在任何的WordPress站点上自由地写博客。即使我们知道可以在那里查找网页,如果我们试着访问这个网页,我们可能被导向了另一个网页。这样情况会发生是因为,浏览器向网页提供的referrer信息,显示你没有成功地登录进来。

How do I Enable Sending Referrers?

我怎样才能够发送 Referrers?

Unfortunately, there may not be simple straight forward answer. Listed below are methods to enable this function, so please check both what is listed for your browser and also your firewall.

不幸地是,关于这个问题,可能没有简单的,一目了然的答案。下面列出了一些方法,能够激活这个功能,因此请看看哪些是为你的浏览器列出的,哪些是为你的防火墙列出的。

If the program you use is not listed, study what is given for the others - the principle is the same throughout, it is just the method which differs between programs.

如果没有列出你使用的程序,学习其他人的列出了什么-原理都是通用的,只是程序之间使用的方法会有所不同。

I had the same problem, so I went into the cpanel of my server, then to phpMyAdmin, and brought up the WordPress tables, found and edited the wp-options to include the /wordpress/ folder in the url. That did the trick.

我遇到了同样的麻烦,因此我来到了我的服务器的cpanel,然后来到phpMyAdmin,然后找出了WordPress表格,找到并且编辑wp-选项,在url中包含/wordpress/文件夹。这样能够解决麻烦。

Internet Explorer 6

Internet Explorer 6

This can be done from the computer's Control Panel > Internet Options, or from within the browser Tools > Internet Options.

可以从电脑的控制面板>因特网选项,或者从浏览器内部的工具 > 因特网选项中实现这一点。

  1. Click Security.
  1. 点击安全.
  1. Click Trusted Sites then Sites.
  1. 点击可信任的站点然后点击 站点
  1. Add your website address in the box provided and click Add.
  1. 在提供的框中添加你的网站地址,然后点击添加
  1. Uncheck the box that requires https verification.
  1. 不要选中需要https确认的框。
  1. Click the Privacy tab (Medium is an acceptable setting on the slider, but click Sites and again enter your website address)/
  1. 点击保密按钮(Medium是slider上一个可以接受的设置,但是点击站点,再次地输入你的网站地址)/
  1. Now click Allow.
  1. 现在点击允许
  1. Click Apply.
  1. 点击应用

This has only altered settings for your website and this does not otherwise affect your browsing.

上述只是改变了你的网站当我设置,但是没有影响你的浏览。

Firefox 1.0+

RefControl

Firefox 1.0+

RefControl

Use the RefControl extention for Firefox: https://addons.mozilla.org/firefox/953/

为Firefox使用 RefControl 扩展: https://addons.mozilla.org/firefox/953/

Manually Setting

动手设置

Warning: this method may be considered as a privacy risk as all sites will receive referers.

警告: 这种方法可能被看做是要冒泄密的风险,因为所有的站点都会收到referrers。

  1. Type about:config in the URL address bar.
  1. 在URL地址条中输入about:config
  1. A large collection of alphabetically listed information will appear in the browser window.
  1. 浏览器窗口中会出现大量的按字母顺序排列的信息。
  1. Search for network.http.sendRefererHeader.
  1. 搜索network.http.sendRefererHeader
  1. By default, this should be set at 2.
  1. 默认情况下,这个应该设置为2。
  1. If it is set to 0 - which disables sending referrers - right click it, select Modify and enter 2 as the value.
  1. 如果这个设置为0-就不能给发送referrers-点击,选择修改,然后输入2,作为一个值。
  1. If that doesn't work, try a value of 1
  1. 如果不能够运行,尝试一下值1

See http://kb.mozillazine.org/Network.http.sendRefererHeader for more information.

更多的信息,请看看http://kb.mozillazine.org/Network.http.sendRefererHeader

Opera

Opera

Sending referrers is enabled by default.

默认情况下,就可以发送referrers。

If you have disabled it, go to Tools > Preferences > Privacy and re-enable it.

如果你取消了这个操作,进入工具 > Preferences > 保密 使这个操作重新运行。

K-Meleon

K-Meleon

Sending referrers is enabled by default.

默认情况下,可以发送referrers。

If you have disabled it, go to Tools > Privacy > Block referrers (if already checked)

如果你取消了这个操作,进入工具 > 保密 > 阻止 referrers (如果已经选中的话)

Norton Internet Security

Norton因特网安全

Go to Privacy Control > Advanced > Add Site.

进入 保密控制 > 高级的 > 添加站点

Add your URL (ie. example.com) and make sure everything is permitted.

添加你的URL(例如example.com)要确认所有的操作都得到了准许。

Norton Personal

Norton 个人的

Some web pages require referrer information before allowing you to view their page. If you want to allow referrer information to pass to a particular web page, you must create a rule for it.

有的网页需要referrer信息,才会允许你来访问站点。如果你允许referrer信息发送到一个特别的网页上,你必须为此创建一个规则。

To Create a Rule

创建一个规则

Open Norton Internet Security or Norton Personal Firewall and choose one of the following:

打开Norton 因特网安全或者Norton 个人防火墙,并且选择以下的内容:

In Norton Internet Security/Norton Personal Firewall 2003 在Norton因特网安全/Norton2003个人防火墙

  1. Click Options > Internet Security or
  2. 点击选项>因特网安全或者
  1. Personal Firewall (This step is not always needed) and click the Web Content tab
  1. 个人防火墙(并不是总是需要这个步骤)并且点击网络内容标签

In Norton Internet Security/Norton Personal Firewall 2004

在Norton个人安全/Norton2004个人防火墙

  1. Double-click Privacy Control
  2. 双击保密控制
  1. Click Advanced
  2. 点击高级的
  3. Click Add Site (A new site/domain box appears)
  4. 点击添加站点(一个新的站点/域框显示)
  5. Enter the name of the site that you want to receive the referrer information and click OK. In this example, it will be www.symantec.com. The site name appears in the left frame of the Options window.
  1. 输入你想要收到referrer信息的站点的名称并且点击OK(好)。在这个例子中,名称是www.symantec.com。站点名称在选项框的左框中显示。
  1. Click the name of the new site
  1. 点击新的站点的名称
  1. Click the Global Settings tab
  1. 点击全球设置标签
  2. In the "Information about visited sites" section, clear "Use default settings"
  1. 在"关于访问过的站点信息"部分,清除"使用默认设置"
  1. Click Permit
  2. 点击允许
  3. Click OK to close the Options window
  4. 点击OK(好)来关闭选项框


Norton Support Reference

Norton 支持参考

Netbarrier

Netbarrier

Go to Privacy > Surf > Information Hiding, and uncheck the "Last Web site visited" box.

进入保密 > 网上冲浪 > 信息影藏,取消选中"最后访问的站点" 框。

Sygate Firewall

Sygate 防火墙

The free version of this firewall does not block sending referrers. 这个防火墙的免费版本不会阻止发送referrers。


The Pro version:

Pro版本: Click Tools > Options > Security

点击工具 > 选项 > 安全

Ensure that 'enable stealth mode browsing' is unchecked.

确保这个能够保证没有选中' stealth mode 浏览'。

Kerio Firewall 4

Kerio 防火墙 4

Turn ON the HTTP referrer under the privacy tab of web filtering.

在网络filtering 的保密标签上打HTTP referrer。

Zone Alarm Pro

Zone Alarm Pro

  • Under Privacy Button on Left, Click on Site List Tab.
  • 左边的保密按钮上,点击站点列表标签。
  • Right click on "Private Header" column where WordPress URL is located. Or click "Add" to add the URL.
  • 点击WordPressURL所在的"保密标头"栏。或者点击"添加"来添加URL。
  • From the menu, choose Options
  • 从菜单上,选择选项
  • On the first tab named "Cookies", remove checkmark on "third party cookies - remove private header information"
  • 在第一个标明为"Cookies"的标签上,移除"第三方 cookies – 移除保密标头信息"上的checkmark
  • Click OKAY
  • 点击OKAY(好)

Agnitum Outpost Firewall Pro 2008

Agnitum Outpost Firewall Pro 2008

  1. Click on Settings.
  2. 点击设置。
  3. Click on Web Control.
  4. 点击网络控制。
  5. In web control level, clic on customize and then change to allow referrers.
  6. 在网络控制级别上,点击自定义,然后更改,允许referrers。

McAfee

McAfee

  1. Right-click the red M icon.
  2. 点击红色的M图标。
  1. Click Privacy Service.
  1. 点击保密服务
  1. Click Options.
  2. 点击选项
  3. The McAfee Privacy Service window appears. Click Cookies.
  4. 出现了McAfee保密服务窗口。点击Cookies
  5. Enter each website address from which you would like to allow cookies.
  1. 输入每个网站地址,你在这些网址中允许cookies。
  1. Click Add.
  1. 点击添加
  1. Once completed, close the window
  1. 完成后,关闭窗口。

Privoxy

Privoxy

This might apply to other local proxy servers and ad busters. There is a "+hide-referrer" option that defaults to "forge a url" in the referral header; either disable this option in default.action (-hide-referrer) or simply place your domain in the { fragile } section of user.action. Another option is to exclude your domain from being proxied in your web browser's setings.

这个可能适用于其它的本地代理服务器和ad busters。有一个"+hide-referrer"选项,默认在referral 标头上"伪造一个 url",在default.action (-hide-referrer)上取消这个选项或者就在user.action的{ fragile }部分放置你的域。另一个选项是清除你的网络浏览器的设置中代理的域。

Other Methods

其它方法

If the methods outlined above fail to resolve the problem, there are a few other possible solutions:

如果上面所列的方法不能够解决问题,有一些其它可能的解决方法。

  • Check CURL's library is installed
  • 确认安装了CURL的library
  • Delete your cookies.
  • 删除你的cookies。
    • This is helpful if you've recently made any changes to your path structure or domain.
    • 如果你最近对你的路径结构或者域做了更改,上述的方法很有用。
  • WP 2.0 Only - Delete the wp-content/cache folder. This would be necessary if you just finished WordPress:Moving WordPress, since the cache retains the previous URI/URL even if changed directly in your database.
  • 只适用于WP 2.0 Only –删除wp-content/cache文件夹。如果你只是完成了移动WordPress,这一步就是必要的,即使直接在你的数据库中更改了,高速缓存仍然保持了原先的URI/URL。
  • Rename the .htaccess file, if it exists.
  • 如果存在.htaccess文件,给这个文件重新命名。
    • Under certain configurations, mod_rewrite can interfere with database access causing WordPress to have an incorrect siteurl setting.
    • 在某个配置下面,mod_rewrite可以干预数据库访问,导致WordPress产生一个错误的siteurl设置。
  • Verify the siteurl setting in the wp_options table of your database is set to the root folder of your WordPress installation.
  • 在你的数据库wp_选项表格中确认siteurl设置,设置在你的WordPress安装的根文件夹上。
    • For example: you may have entered http://example.com as the URL which resolves correctly because of DNS but will fail as a referrer unless http://example.com is the siteurl in the database.
    • 例如:你可能输入http://example.com作为URL,会正确地分解,因为除非http://example.com在数据库中是siteurl,否则,DNS就不会成为一个referrer。
  • Subdomains may also create problems.
  • 子域可能还会产生问题。
    • You may have created a subdomain blog.example.com, and installed WordPress into www.example.com/blog. Under Options, General look for the WordPress address (URI): field. Change it to read: http://www.example.com/blog. The Blog address (URI): field should still read http://blog.example.com
    • 你可能创建了一个子域blog.example.com,而且将WordPress安装进了www.example.com/blog。在选项, 总的 下面查找WordPress 地址 (URI):区。将这个URI改为:http://www.example.com/blog博客地址 (URI):仍然应该读作http://blog.example.com