Who else suddenly has includes problems that didn't before?

DJMaytag

I had a site with the following code at the top of every page of mine on my site, and it was working 100% fine until just recently (end of Feb or beginning of March):

<?php
include 'http://www.djmaytag.com/PARTS/top.txt';
?>
<?php
include 'http://www.djmaytag.com/PARTS/deskbar.txt';
?>
<!-- ************************************************************************************************************************************* -->
<?php
include 'http://www.djmaytag.com/PARTS/INDEX_main_head.txt';
?>
<?php
include 'http://www.djmaytag.com/PARTS/INDEX_main_sticky.txt';
?>

and now all of a sudden, it's spitting out these errors:

Warning: main(): URL file-access is disabled in the server configuration in /home/djmaytag/index.php on line 1

Warning: main(http://www.djmaytag.com/PARTS/top.txt): failed to open stream: no suitable wrapper could be found in /home/djmaytag/index.php on line 1

Warning: main(): Failed opening 'http://www.djmaytag.com/PARTS/top.txt' for inclusion (include_path='.:/usr/lib/php') in /home/djmaytag/index.php on line 1

Warning: main(): URL file-access is disabled in the server configuration in /home/djmaytag/index.php on line 3

Warning: main(http://www.djmaytag.com/PARTS/deskbar.txt): failed to open stream: no suitable wrapper could be found in /home/djmaytag/index.php on line 3

Warning: main(): Failed opening 'http://www.djmaytag.com/PARTS/deskbar.txt' for inclusion (include_path='.:/usr/lib/php') in /home/djmaytag/index.php on line 3

Warning: main(): URL file-access is disabled in the server configuration in /home/djmaytag/index.php on line 7

Warning: main(http://www.djmaytag.com/PARTS/INDEX_main_head.txt): failed to open stream: no suitable wrapper could be found in /home/djmaytag/index.php on line 7

Warning: main(): Failed opening 'http://www.djmaytag.com/PARTS/INDEX_main_head.txt' for inclusion (include_path='.:/usr/lib/php') in /home/djmaytag/index.php on line 7

Warning: main(): URL file-access is disabled in the server configuration in /home/djmaytag/index.php on line 10

Warning: main(http://www.djmaytag.com/PARTS/INDEX_main_sticky.txt): failed to open stream: no suitable wrapper could be found in /home/djmaytag/index.php on line 10

Warning: main(): Failed opening 'http://www.djmaytag.com/PARTS/INDEX_main_sticky.txt' for inclusion (include_path='.:/usr/lib/php') in /home/djmaytag/index.php on line 10

I've been searching the forums, and it seems like others are having similar problems, but not quite 100% the same problem I'm having (the same error is coming out for someone using the require function, that's as close as I've seen).

I did a google search and found that there are a TON of sites with the "Warning: main(): URL file-access is disabled in the server configuration" error on their page (and of course mine is right near the top on Google...

neerav

from http://in2.php.net/manual/en/function.include.php

If "URL fopen wrappers" are enabled in PHP (which they are in the default configuration), you can specify the file to be included using a URL (via HTTP or other supported wrapper - see Appendix L for a list of protocols) instead of a local pathname.

Looks like your admin turned it OFF. 🙁 Which seems to be what the error is saying "...URL file-access is disabled in the server configuration..."

bretticus

Yep, your admin turned off allow_url_fopen most likely. You should be able to get the external files via fsockopen() check out the examples in the manual

DJMaytag

ok, i'm also using the includes because that was the simplest way to do the site in PHP. I know almost nothing about any other functions... I was planning on trying to learn and write some scripts for some other parts of my site, but never got around to it...

thorpe

well you could start learning now. the manual is probably the best place to start.

Weedpacket

You might also ask the admin to turn it back on.

DJMaytag

Originally posted by Weedpacket
You might also ask the admin to turn it back on.

That was indeed the problem, and they turned it back on (I just emailed the info from the earlier posts, and they found that that was the problem).

They seemed to be a little bit reluctant to do so though, and pointed me to re-read their terms of service. Is the code (the way I'm using it) typically a problem that could lead to exploits?

Anyway, thanx for the help guys!

Weedpacket

There are always security risks involved when taking in data from the outside world. What if whoever is running http://www.djmaytag.com/ has their site hijacked and their pages get rewritten? When you get the output from those pages who knows what you might be sucking down? Sure, any PHP in the original script would have been evaluated and you'd get the result, but that won't stop an attacker getting their PHP code into your script if that's what they want to do.

Actually, I just re-read your original error message, and I've realised that your site is http://www.djmaytag.com/; in which case you shouldn't even be using URLs in the first place, but file paths instead.

bretticus

Actually, I just re-read your original error message, and I've realised that your site is http://www.djmaytag.com/; in which case you shouldn't even be using URLs in the first place, but file paths instead.

Hehehe...I know this guy that does the same thing. Annoys me to no end. No offense!

DJMaytag

Originally posted by Weedpacket
Actually, I just re-read your original error message, and I've realised that your site is http://www.djmaytag.com/; in which case you shouldn't even be using URLs in the first place, but file paths instead. [/B]

Yeah, I'm a newbie... I just did it the way that the examples I used had showed, which used the full URL's.

neerav

Well, now is the perfect opportunity to learn a couple very useful and "safer" commands. Try "include()" and "require()" and their "_once" counterparts.

All the best!