!! Attention PHP Users and Developers !!

[matthewshull]

What time will you be turning this off?

[admin]

Originally Posted by ixie02

I think rationalizing that you must turn it off and screw up production sites because the world is full of bad php coders is a rather obscure excuse. Their should be a workaround and time to implement it before you pull the plug. Seems to me you should be able to find a temporary fix at the hosting level as opposed to placing the entire burden on the resellers.

Might want to take that up with php, we did not make php and can't control how functions suchs as fopen work other than the options they give us. They offer us NO options to secure it.

[matthewshull]

What time please?

[admin]

With in the next 2 hours or so I guess.. We already had another dos attack tonight.

[admin]

fopensock is an option but curl is still better. fopensock will stay enabled right now unless we find reason other wise to disable it. It has the same issues is fopen does but is a bit narrower then fopen.

If you are going to change code go with curl it's much safer over all and will never be disabled.

[matthewshull]

Well, after sweating and worrying the last few hours, I just checked phpinfo for the 2 sites I have LiteCommerce on and it is turned off. So I went and checked the stores, and they seem to be running normally.

Yeeeeehaw! Now I hope no one else has any issues. What I don't understand is why they both broke the last time you turned it off, but they didn't this time.

Am I missing something here?

[admin]

Not sure, it should be off now..

[Dean]

Fopen is now off on all unix servers.

[sheptech]

Not to be daft here, but technically fopen still works fine for local files just not URLs, right? That's my understanding of the implication of the allow_url_fopen option.

(ref: http://www.zend.com/manual/ref.filesystem.php )

[sheptech]

FYI I had concerns about this affecting the downloads plugin of e107 - so far it does not as near as I can tell.

In case anyone cares, 3rd party apps I'm using that survive the change are:
e107 v0.616, v0.617 (includes core newsfeeds, downloads)
e107 plugins: Coppermine (current ver)
ZenCart v1.1.4d (oops!, need to update)

still looking into e107 plugin SimpleCart
fyi I don't use electronic delivery for anything in the carts.

[jetzkr8]

Originally Posted by Two Roads Media

Does anyone know of any CSS readers that can parse without the allow_url_fopen??? As far as I can tell, that is the only way to display an RSS or XML feed using PHP. Without it, RSS is useless despite being one of the most popular and quickly growing information sources on the web.

I'm open to suggestions.

Yeah I just finished soem work to display Vortech server status from the XML feed and fopen() is now the stumbling block toan otherwise elegant solution. See http://forum.vortechhosting.com/show...9629#post89629

[jetzkr8]

I have attempted to use curl functionality to read Vortech Status XML feed and have this working at my site. See http://forum.vortechhosting.com/show...0007#post90007 where the attachment has the revised script while the code snippet below shows the relevant part

      $ch = curl_init ();
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_URL, 'http://216.157.144.91/monitor.xml');
curl_setopt ($ch, CURLOPT_TIMEOUT, 60);
$xml_parser = xml_parser_create();
xml_set_element_handler($xml_parser, "startElement", "endElement");
xml_set_character_data_handler($xml_parser, "characterData");
xml_parse($xml_parser, curl_exec ($ch) );
xml_parser_free($xml_parser);
curl_close ($ch);

:angel:

[matthewshull]

Originally Posted by sheptech

FYI I had concerns about this affecting the downloads plugin of e107 - so far it does not as near as I can tell.

In case anyone cares, 3rd party apps I'm using that survive the change are:
e107 v0.616, v0.617 (includes core newsfeeds, downloads)
e107 plugins: Coppermine (current ver)
ZenCart v1.1.4d (oops!, need to update)

still looking into e107 plugin SimpleCart
fyi I don't use electronic delivery for anything in the carts.

Keep checking. My ecomm sites were working last night. Now one of them is not. I am sure the other is soon to follow.

Let the fun begin. Thanks.

[ixie02]

A little off the subject, but is their something we can scan for in the code to make sure that apps we are considering using/installing or are using don't require that 'allow_url_fopen' be enabled?

[ixie02]

Originally Posted by matthewshull

Keep checking. My ecomm sites were working last night. Now one of them is not. I am sure the other is soon to follow.

Let the fun begin. Thanks.

I've been looking at e107 so thanks for the tip.