Redirecting router react on android

[Diegoorellana]

Website URL

http://agrotest.rf.gd/

Error Message

instead of api result data I get the following html

function toNumbers(d){var e=;d.replace(/(…)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=,d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e=“”,f=0;f<d.length;f++)e+=(16>d[f]?“0”:“”)+d[f].toString(16);return e.toLowerCase()}var a=toNumbers(“f655ba9d09a112d4968c63579db590b4”),b=toNumbers(“98344c2eee86c3994890592585b49f80”),c=toNumbers(“a0530a1f106b0b97af9070f8d7a6dcbb”);document.cookie=“__test=”+toHex(slowAES.decrypt(c,2,a,b))+“; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/”; location.href=“https://agrotest.rf.gd/server/agro/getTableNames.php?i=1”;

Other Information

Im using Link from react-router

import { Link } from ‘react-router-dom’;

to redirect to the main page “/” on desktop works fine, but on android phone when it gets idle after a while (turning of the screen or open another app) and I come back to the web app and try to press the button to redirect to the main page instead of getting the data from an api request I get that html, I read that is for security reasons, to make sure that the requests are being made from a browser, but somehow react-router is not passing the test. What can I do? Thank you. The api request is a very simple request.

[Diegoorellana]

this is my htaccess

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.html [QSA,L]

    Header set Cache-Control "no-cache, no-store, must-revalidate"
    Header set Pragma "no-cache"
    Header set Expires 0

[KangJL]

@Diegoorellana

The api request is a very simple request.

Did you read this?

Ensuring only web browsers can access your website

InfinityFree is a website hosting service. That means that the hosting accounts we provided are intended for hosting websites. Websites contain pages that are accessed through web browsers. InfinityFree is not intended to be used for file sharing, API hosting, database hosting or background tasks/tools. To help enforce this, free hosting enforces a security system that makes sure that anyone trying to access your website is using a normal web browser. This is done by checking whether the web br…

[Diegoorellana]

Yes, but what does that has to do whitht he phone goging idle and then trying to use the web app again? Can you explain?

[Diegoorellana]

as far as I know

• Access through Android or iOS mobile apps (MOBILE WEBSITE WORK FINE).
  it seems that it doesn’t if the user gets idle on the website and then try to come back. Is like the connection to the server is lost and you need to refresh to gain it again. I’m just trying to understand what is happening.

[Admin]

Interesting, this shouldn’t happen. And I’m not sure why this doesn’t work.

When you first open the site, this Javascript code is sent to the browser to set a cookie. This cookie must be passed with every request or the server will block it. The cookie is set with an extremely long lifetime (almost 15 years) and should keep working for that long.

If you see this, it means that either the cookie is missing from the request or invalid, and I don’t understand why either of those things would be the case.

Just to be very clear: your application runs within a web browser, right? It’s not running in a web wrapper (like Cordova) or using React Native (i.e. without a browser entirely)?

---

The best solution I can think of right now is to integrate code in the application that detects responses like these. If it gets a response like this, it can reload the page, which should also get this Javascript code, generate a fresh cookie which can then be used to authenticate further requests.

[Diegoorellana]

Yes it is running in a normal browse, android chrome. Maybe is the htaccess redirections plus react-router? or a bug in react router? I do not know, also it happens randomly after idle, sometimes it doesnt happen. Thank you anyway!

[Diegoorellana]

Galazy A13 Model SM-A135U. Chrome version 110.0.5481.153. Android version 13

[Admin]

This issue has to do with cookies either becoming invalid or not getting sent at all. I don’t know exactly which is the case, both explanations don’t really make sense to me. The cookies have a very long lifetime, and it wouldn’t make sense for a browser to just stop sending cookies in the background.

I’m very certain that this isn’t your code though. The browser validation system is applied before your website code is executed, so you can’t influence it with any PHP or .htaccess code. And seeing how the code does work at first, it means cookies are being passed along.

Regardless, all of this only tells you why the issue happens, it doesn’t yet provide a clear way to fix it. So I would still recommend to implement the workaround I recommended before:

@Admin

The best solution I can think of right now is to integrate code in the application that detects responses like these. If it gets a response like this, it can reload the page, which should also get this Javascript code, generate a fresh cookie which can then be used to authenticate further requests.

[Oxy]

It can really be anything,
from the fact that you have some maintenance application in the system that simply deletes cookies for your privacy, some changes in android v13, up to the point that when you update chrome or everything related to the network modules which then results in some cookies being deleted.

If I were you, I would try to explicitly emphasize in the browser settings that the “__test” cookie is not deleted, but always kept.

Or try to use another browser that is not chrome (one that did not come with the system).

Maybe it’s the fact that it tries to keep only secure=true cookies while it doesn’t like false.

[Diegoorellana]

Thank you, I think I will follow this direction.