My server default value for 'allow_url_fopen' is OFF

Shoudn't this be checked during install too??

If we need to read a remote image file, we won't be able too... unless we use cURL but i woudn't like to...
I just need to know, to finnish something under downloads module.  

 

I think you checked on my site - there is this value ON.  

 

jep... that why i'm asking...  

 

'allow_url_fopen'  is disapearing from the servers, and some of them won't eaven let you shouse between ON and OFF.

So i had to part from the beginning that the 'allow_url_fopen' will be OFF.  

 

Hi,

"allow_url_fopen" is a wrapper which allows to access URL's as if they are local files.
This means, that with "include" or "require" or other codelines you can access external files.
Because this is one of the most used hack-attacks, this parameter isn't allowed on most servers.

For you it is important, that even if "allow_url_fopen" ist allowed, it isn't possible for Windows based Systems, to access remote Image-Funktions.
For php-Versions > 4.3.4 you only can set this parameter inside php.ini and NOT in .htaccess or inside php-code.

Even too, several GD-Implementations have several features enabled or again disabled (like PNG or GIF-Support).
As example:
- jpeg isn't supported by GD-Implementation by default. There must be activated additional wrappers.
- png is supported from GD-Libary > 1.6
- gif is supported from GD-Libary > 2.0.28 AND
 reading support since php version > 4.3.0
 writing support since php version > 4.3.9 and 5.0.1

Since pphp Version 4.3.0 the GD-Libary is included in php - before, it must be compiled.



More: Because there are problems with several php-Versions and cURL, cURL must be installed with a version > 7.9 !!

More informations about wrapper:  http://de3.php.net/manual/de/wrappers.php

Greetings
Reo  

 

Öhm .. one more is a problem for the Download-Module if SafeMode is activated:

set_time_limit, max_execution_time aren't changeable if SafeMode is activated.

move_uploaded_file isn't working, if file/directory owner isn't the same as the user running the script (both: directory from where to move and directory where to move).

Greetings
Reo  

 

is this happening only in safe-mode?  

 

Yepp ... only happening if SafeMode is ON.  

 

To solve all problems coming up with SafeMode:

- Files should only be stored in directories created by Webuser and NOT by FTP-User
- Files should only be uploaded by Webuser and NOT by FTP-User

If there is a mix (FTP-Allowed in Downloads Administration), Files uploaded by FTP aren't allowed to be changed or removed by Webuser.

This is a big issue to be solved not only by us coders - but even too from the Webhostes.

Greetings
Reo