打字错误条件IP / if-if-else

Question

is it possible to negate a condition with typoscript?

We have a page where parts are only seen, if your ip-address is in the range 10.*.*.* :

[IP=10.*.*.*]
  # show internal content
[global]

This works. But now we have following problem. The new loadbalancer (waf) has an iternal address, too (ie 10.1.2.3 ), so the internal content is shown with the above condition! Unfortunately a negation of the IP-Condition doesn't work. I tried:

[IP=10.*.*.*] && [IP!=10.1.2.3]

A working solution for negating a condition is:

[IP=10.1.2.3]
  # do nothing
[ELSE]
  # show internal content
[global] 

but I need the condition [IP=10.*.*.*] too! I also tried

[IP=10.1.2.3]
  # do nothing
[IP=10.*.*.*]
  # show internal content
[global] 

but it doesn't work, too.

Maybe someone has an idea to fix it! Changing the loadbalancer-ip is no option!

Thanks, mph

Answer 1

What you want to do is not changing your condition but marking this IP as Reverse Proxy like:

$GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyIP'] = '10.1.2.3'; $GLOBALS['TYPO3_CONF_VARS']['SYS']['reverseProxyHeaderMultiValue'] = 'last';

This doesn't use your loadbalancer's IP but the original IP used to connect to it. So your condition will work as it used to (provided your loadbalancer sets a proper X-Forwarded-For header).

You want to do this because this fixes your issue not only for these conditions but also for logging (TYPO3 sys_log for login-attempts), for IP-Auth etc. so it's the proper way to solve your issue.

Answer 2

There is a way with pure TypoScript:

TS constants:

[IP=10.1.2.3]
[else]
  temp.noWaf = 1
[end]

TS setup:

[IP = 10.*.*.*] && [globalVar = LIT:1 = {$temp.noWaf}]
  # show internal content
[end]

However splitting the logic into TS constants and setup is IMHO confusing. Using globalVar = LIT is hard to read.

Finaly, some of my attempts to clean things up failed, eg using LIT:0 or != LIT:1 .

Answer 3

I'd use a userFunc . To retrieve the IP-address you can use GeneralUtility::getIndpEnv('REMOTE_ADDR') and to compare IP addresses there is GeneralUtility::cmpIP() .

Answer 4

Basic answer to your question in the topic: Yes, this is possible, and I did it already, here an example:

[browser = msie] && [version =  <7] && [globalVar = TSFE:id != 100]

(answer friendly taken from pi-phi spicker, http://www.pi-phi.de/19.html )