Dropdowns route on files causes server error since 3.6.0 due to change in method (GET to POST) on .jpg etc.

[belugaed]

The /panel/dropdown calls appear to do a POST to retrieve the API data to populate the dropdown. It posts to it’s own page, which is fine for the most part e.g. posting to https://my.domain/panel/site.

However, since the file/image page has a url such as https://my.domain/panel/pages/about/files/my-image.jpg, it’s posting to this URL structure:

http://my.domain/panel/dropdowns/pages/about/files/my-image.jpg

Since it’s an extension some shared hosting would not naturally allow - Posting to a jpg/png etc. presumed to be exclusively GETs by most host specs.

As a result we get a 403 / Forbidden.

The call seems to work as a GET so not sure why it needs to POST for this panel function to dropdowns.

This appears to be an issue since 3.60 and it’s pre-releases. Pre this version the url structure was a GET to

https://my.domain/api/pages/about/files/my-image.jpg?select=options

[bastianallgeier]

✅

[belugaed]

I've checked this out on the 3.6.2 pre-release (thanks!).

It works to a point, but 404s if there is an @ in the filename (typical if somebody exports 2x, 3x etc. from photoshop).

Shows fine in the file picker, but then when you click through (e.g. /panel/pages/about/files/my-file-2@2x.jpg) it shows the "URL not found on server".

URL encoding the @ to %40 doesn't seem to help either.

@bastianallgeier

[bastianallgeier]

@belugaed I tried but was not able to replicate this. It all works fine over here. What kind of server are you using?

[belugaed]

Hi @bastianallgeier

It's a cloud based provider (CloudNext / https://www.20i.com/), but ultimately it's a Linux installation with Apache, PHP 7.4.

Happy to share the git basecode with you personally or give FTP access it helps debug it.

[distantnative]

@belugaed does this continue with https://github.com/getkirby/kirby/releases/tag/3.6.3-rc.1 for you? If so, yes please share your setup/code, might help to replicate the problem for us.

[bastianallgeier]

We fixed this.