allow_url_include is On

Ok. I've seen this error throughout the forum and it would seem that for whatever reason the htaccess file has been the culprit.

allow_url_include is On (warning, you should have this param in Off state, or your site will unsafe) 

I've checked my own htaccess file and in mine, it shows that the this is shut off:  php_flag register_globals Off

Can someone explain why this error is showing on the site, but is actually correct in my htaccess?

This just appeared today which really confuses me. It actually shows up throughout the site now. The only way that I've been able to get to some sections of the site was to create a php.ini file with this code:

[PHP]

allow_url_include = Off

This is a quick fix but do I have to copy it to every folder to get my site working again?

I'm running 7.1 and would like to upgrade to 7.1.1 but can't until this is fixed. I've already tried to do the upgrade but that didn't take the error away, and in the admin section it still shows that I need to upgrade.

Any suggestions?

Quote · 14 Mar 2013

You are able to get instances of the site working with a php.ini file because this is controlled in your servers php configuration rather than .htaccess file.  php.ini files in many servers when placed in directories will only apply to that directory. However, the main php configuration file will control all on the site.

 

Not being knowledgeable about your server I can not give a step by step but here is what you need to do.  Your hosting provider should have somewhere in your control panel to edit your php configurations.  Some have have a raw file you can edit usually a couple levels above your domain name in file structure or provide a tool for editing this file turning different features on and off. You may need to contact your hosting provider to find where this is located on your server to edit. Take a look around for php folders above your domain folder if you are permitted to view them and look for a /php folder. Otherwise look through menu options for php configuration.

You will then of course need to change this to "OFF" on the main configuration file. You can then remove the additional php.ini files that you mentioned you created earlier.


I am willing to take a look for your configuration and make this change for you but I would need a username and password to access your account to see if making this change for you is possible withing your control panel. Otherwise a quick contact to your hosting provider if they have good customer support can fix you up too. They can change it for you. Just tell them you want it turned off. If you bring in the whole story of the dolphin script they may misunderstand and tell you that they do not support 3rd party products. If you choose to have me take a look at then please for your security do not post your private login information here on the forum. You will need to send it to me in a private message.

Quote · 14 Mar 2013

Attached is a picture of an example of a tool my hosting provider offers for quick easy turn on/off features for some of the most commonly used php configurations.

phptool.png · 17K · 384 views
Quote · 14 Mar 2013

The problem is the php module for zendguard does not match the php version so php cannot load it.

You will need to point this out to your host.

Oh, and the other issue with allow_url_include. If this is new(just started happening recently) then it is another indication that something like php or cpanel was upgraded by your host. Contact them to have it fixed.

 

 

Quote · 21 Nov 2017
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.