when i had installed UNA on my web server and while in my , it gives error "allow_url_include is on (you need to disable it, or your site will be unsafe) " while my "allow_url_include" is off but it says its on , kindly let me know how to solve it
You need to be sure that this value is off in the Loaded Configuration File (from PHPinfo). Also, some hosting may block the changes fo the similar settings which are unsafe from their view.
I didn't want to open a new thread about this - but it's turned off by default with my provider and before I bug them to hopefully change it, I'm wondering why we are being asked to do this. From various places online it states: "This setting is up there as one of the most dangerous settings you can have enabled on a web server. It will allow someone to potentially inject a tiny piece of code into your system that could in turn completely compromise your entire server. If you have some bad programming practices in place it could even mean someone could compromise your system without even having to inject code. " and "If a script claims to require this feature, you should look into alternative software, as the use of this feature indicates serious design flaws. " --- I'm really wanting to find an Oxwall replacement because it seems like a dead project, wanted to use Dolphin but was directed this way -- but wondering if maybe this isn't a good idea.
Birch you are partly right the installation of una does not include php.ini files is why you get this message php.ini files are server files and thus can be used to turn of allow_url_include to turn it off you just need to set up a php.ini file and add it to the right files
for example when i manually installed una i had to add a php.ini file to install directory to install it as allow_url_include was on i had to turn it off i did so with a php.ini file same with studio i could not access studio i added that same php.ini file to studio sorted same with not being able to have the time line post or being able to access conversations section of the site i added a php.ini file to modules folder sorted and i originally had a php.ini file in the root directory of the site so the user side was accessible without this warning
from this website you will read the same as what Birch posted but heres how to solve your issue Muhammad Zahid Ali
P.S. Muhammad Zahid Ali Post what page your having this problem on so we can better help you as the php.ini file needs to be added to the right place with the command from the above website or you could contact your hosting company if there a good host they should be able to fix it within the hour
Hi Alex, I'm experiencing a similar challenge as Muhammad since migrating my website. But I just found out that these links you shared to him are broken. I'll appreciate any resource that will help to fix this. Thanks
A
maybe you need to restart apache aND check
still not , it is On inside configuration but it still giving error
allow_url_include is off inside configuration
it's better to check in phpinfo if this value was really changed.
If it's just an installation you can check it here:
http://example.com/path-to-una/install/?action=phpinfo
If UNA is already installed, you can check it here:
http://example.com/path-to-una/studio/dashboard.php?action=phpinfo
Hello Muhammad!
You need to be sure that this value is off in the Loaded Configuration File (from PHPinfo). Also, some hosting may block the changes fo the similar settings which are unsafe from their view.
B
I didn't want to open a new thread about this - but it's turned off by default with my provider and before I bug them to hopefully change it, I'm wondering why we are being asked to do this. From various places online it states: "This setting is up there as one of the most dangerous settings you can have enabled on a web server. It will allow someone to potentially inject a tiny piece of code into your system that could in turn completely compromise your entire server. If you have some bad programming practices in place it could even mean someone could compromise your system without even having to inject code. " and "If a script claims to require this feature, you should look into alternative software, as the use of this feature indicates serious design flaws. " --- I'm really wanting to find an Oxwall replacement because it seems like a dead project, wanted to use Dolphin but was directed this way -- but wondering if maybe this isn't a good idea.
Birch you are partly right the installation of una does not include php.ini files is why you get this message php.ini files are server files and thus can be used to turn of allow_url_include to turn it off you just need to set up a php.ini file and add it to the right files
for example when i manually installed una i had to add a php.ini file to install directory to install it as allow_url_include was on i had to turn it off i did so with a php.ini file same with studio i could not access studio i added that same php.ini file to studio sorted same with not being able to have the time line post or being able to access conversations section of the site i added a php.ini file to modules folder sorted and i originally had a php.ini file in the root directory of the site so the user side was accessible without this warning
from this website you will read the same as what Birch posted but heres how to solve your issue Muhammad Zahid Ali
https://yomotherboard.com/risk-phps-allow_url_include-enabled/
P.S. Muhammad Zahid Ali Post what page your having this problem on so we can better help you as the php.ini file needs to be added to the right place with the command from the above website or you could contact your hosting company if there a good host they should be able to fix it within the hour
B
Hi Alex, I'm experiencing a similar challenge as Muhammad since migrating my website. But I just found out that these links you shared to him are broken. I'll appreciate any resource that will help to fix this. Thanks
Hello Benny !
The link to PHP info in the installed UNA is still the same. Please specify what did you get by studio/dashboard.php?action=phpinfo URL?