Search for at
Security Code:
Security Code 
Type Security Code:
EVO CMS Advanced Search
 
 
Recent Topics
Latest Site News   Next 5 >>
Forum Author Replies Last Post
fixed  Frage nach JavaScript aktiv oder nicht? Fixes & Patches 2.1.x Guest 8 30 Mar 2013
nighty View latest post
fixed  [FIX 2.1.0] Lost Password Fixes & Patches 2.1.x chiroptera 0 21 Feb 2012
chiroptera View latest post
fixed  [FIX 2.1.0] Forums ACP - FAQ Admin Fixes & Patches 2.1.x chiroptera 1 27 Oct 2011
chiroptera View latest post
fixed  [FIX 2.1.0] Forums Attachment Image Resize Fixes & Patches 2.1.x chiroptera 0 26 Oct 2011
chiroptera View latest post
Important  [INFO] evo-mods service started News & Informationen chiroptera 2 24 Oct 2011
chiroptera View latest post
Recent Topics   Next 15 >>
Forum Author Replies Last Post
Important  Wünsch Dir was für die 2.1.1 EVO-CMS 2.x.x nighty 125 11 Nov 2013
mglobig View latest post
Important  Website Awards Eure Webseiten chiroptera 42 01 Aug 2013
nighty View latest post
Achtung  EVO Maps does not work any longer Fehlermeldungen chiroptera 0 06 Mar 2012
chiroptera View latest post
Idea  Webhoster Testseite Webhosting Thorm 16 16 Nov 2011
Hepher View latest post
Important  USA: nuke-evolution --> evolution-xtreme // EVO-German EVO-CMS 2.x.x kaikiste_NEU 7 30 Mar 2014
der-cyberwolf View latest post
No icon  Gruppenbefugnisse Fehlermeldungen 2.1.0 Maiki 0 09 Dec 2013
Maiki View latest post
No icon  Wie ein Fels... ChitChat Anna 2 19 Nov 2013
nighty View latest post
No icon  Schwerer Fehler bei der Installation Fragen & Hilfe vor der Installation 2.1.x mglobig 2 09 Nov 2013
mglobig View latest post
No icon  Adminpasswort vergessen Support German Community Second 5 27 Sep 2013
Second View latest post
No icon  PHP Version 5.4.4-14+deb7u2 Fehlermeldungen 2.1.0 Maiki 10 26 Jul 2013
nighty View latest post
solved  Forum - Anzeige zuletzt bearbeitet Fehlermeldungen 2.1.0 Anna 18 12 May 2013
Anna View latest post
No icon  Ein frohes Weihnachtsfest 2011 & Wünsche ChitChat Guest 12 24 Dec 2012
nedkelly View latest post
No icon  Benutzerbefugnisse Fehlermeldungen 2.1.0 Maiki 15 17 Oct 2012
Maiki View latest post
No icon  Fehlermeldung Forum-Admin Dateitypen Fehlermeldungen 2.1.0 Entenmann 1 04 Sep 2012
gorgolion View latest post
2nd level support  mimetype.php on line 119 mimetype.php on line 121 Support German Community pd35 3 30 Jul 2012
GuestView latest post
 

 
allow_url_fopen ON/OFF
 
 
Post new topic Reply to topic printer-friendly view
View previous topic :: View next topic  
Author Message
RTC4EVER
Coding Expert
Coding Expert



Joined: 04-Feb-2009
Posts: 923
Location: Zürich
Offline
EVO Version: 2.1.0 Final
Post Posted:
 23 Jul 2009
Reply with quote
Post subject: No icon allow_url_fopen ON/OFF

My server default value for 'allow_url_fopen' is OFF

Shoudn't this be checked during install too??

If we need to read a remote image file, we won't be able too... unless we use cURL but i woudn't like to...
I just need to know, to finnish something under downloads module.  


 
 
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Guest
 





 
Offline
Post Posted:
 23 Jul 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

I think you checked on my site - there is this value ON.  


 
 
Back to top
View user's profile Send private message
RTC4EVER
Coding Expert
Coding Expert



Joined: 04-Feb-2009
Posts: 923
Location: Zürich
Offline
EVO Version: 2.1.0 Final
Post Posted:
 23 Jul 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

jep... that why i'm asking...  


 
 
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
RTC4EVER
Coding Expert
Coding Expert



Joined: 04-Feb-2009
Posts: 923
Location: Zürich
Offline
EVO Version: 2.1.0 Final
Post Posted:
 15 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

'allow_url_fopen'  is disapearing from the servers, and some of them won't eaven let you shouse between ON and OFF.

So i had to part from the beginning that the 'allow_url_fopen' will be OFF.  


 
 
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
ReOrGaNiSaTiOn
EVO World Team
EVO World Team



Joined: 03-Jan-2006
Posts: 11742
Location: Als Schwabe in Sachsen-Anhalt
Offline
EVO Version: - Developer Edition -
Post Posted:
 16 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

Hi,

"allow_url_fopen" is a wrapper which allows to access URL's as if they are local files.
This means, that with "include" or "require" or other codelines you can access external files.
Because this is one of the most used hack-attacks, this parameter isn't allowed on most servers.

For you it is important, that even if "allow_url_fopen" ist allowed, it isn't possible for Windows based Systems, to access remote Image-Funktions.
For php-Versions > 4.3.4 you only can set this parameter inside php.ini and NOT in .htaccess or inside php-code.

Even too, several GD-Implementations have several features enabled or again disabled (like PNG or GIF-Support).
As example:
- jpeg isn't supported by GD-Implementation by default. There must be activated additional wrappers.
- png is supported from GD-Libary > 1.6
- gif is supported from GD-Libary > 2.0.28 AND
 reading support since php version > 4.3.0
 writing support since php version > 4.3.9 and 5.0.1

Since pphp Version 4.3.0 the GD-Libary is included in php - before, it must be compiled.



More: Because there are problems with several php-Versions and cURL, cURL must be installed with a version > 7.9 !!

More informations about wrapper:  http://de3.php.net/manual/de/wrappers.php

Greetings
Reo  


 
 
Back to top
View user's profile Send private message Visit poster's website
ReOrGaNiSaTiOn
EVO World Team
EVO World Team



Joined: 03-Jan-2006
Posts: 11742
Location: Als Schwabe in Sachsen-Anhalt
Offline
EVO Version: - Developer Edition -
Post Posted:
 16 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

Öhm .. one more is a problem for the Download-Module if SafeMode is activated:

set_time_limit, max_execution_time aren't changeable if SafeMode is activated.

move_uploaded_file isn't working, if file/directory owner isn't the same as the user running the script (both: directory from where to move and directory where to move).

Greetings
Reo  


 
 
Back to top
View user's profile Send private message Visit poster's website
RTC4EVER
Coding Expert
Coding Expert



Joined: 04-Feb-2009
Posts: 923
Location: Zürich
Offline
EVO Version: 2.1.0 Final
Post Posted:
 17 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

Quote:
move_uploaded_file isn't working, if file/directory owner isn't the same as the user running the script (both: directory from where to move and directory where to move)


is this happening only in safe-mode?  


 
 
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
ReOrGaNiSaTiOn
EVO World Team
EVO World Team



Joined: 03-Jan-2006
Posts: 11742
Location: Als Schwabe in Sachsen-Anhalt
Offline
EVO Version: - Developer Edition -
Post Posted:
 17 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

Yepp ... only happening if SafeMode is ON.  


 
 
Back to top
View user's profile Send private message Visit poster's website
ReOrGaNiSaTiOn
EVO World Team
EVO World Team



Joined: 03-Jan-2006
Posts: 11742
Location: Als Schwabe in Sachsen-Anhalt
Offline
EVO Version: - Developer Edition -
Post Posted:
 18 Aug 2009
Reply with quote
Post subject: No icon Re: allow_url_fopen ON/OFF

To solve all problems coming up with SafeMode:

- Files should only be stored in directories created by Webuser and NOT by FTP-User
- Files should only be uploaded by Webuser and NOT by FTP-User

If there is a mix (FTP-Allowed in Downloads Administration), Files uploaded by FTP aren't allowed to be changed or removed by Webuser.

This is a big issue to be solved not only by us coders - but even too from the Webhostes.

Greetings
Reo  


 
 
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:  
Post new topic Reply to topic printer-friendly view
EVO CMS Forum Index -> Fragen & Hilfe vor der Installation 2.1.x Time synchronized with the forum server time
 
Page 1 of 1


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum