[pmwiki-users] IncludeUrl problem

Julius Thyssen jultus at gmail.com
Thu Jun 5 09:05:35 CDT 2008


I'm using the includeurl.php cookbook file in pmwiki,
which is working as it should, until I try and make it more secure
by only allowing local addresses.

I have this in the local/config.php:

"'<:block>'.Keep(str_replace(array('&gt;', '&lt;', '&amp;'),
array('>', '<', '&'), PSS('$1')))");

$EnableExternalResource = 0;

And even though it then refuses to allow http and https to be included,
it also ends up showing a blank page when I point to the local address.
I tried absolute paths, I tried every possible option that might parse
the correct file,
buit it keeps giving me a blank page:

(:includeurl http://address.com/projects/test/iets/activnew.php:)

works just fine, but

(:includeurl /var/web/projects/test/iets/activnew.php:)
(:includeurl /projects/test/iets/activnew.php:)
(:includeurl /test/iets/activnew.php:)
(:includeurl /iets/activnew.php:)
(:includeurl ../projects/test/iets/activnew.php:)
(:includeurl ../test/iets/activnew.php:)
(:includeurl ../iets/activnew.php:)
(:includeurl ../../projects/test/iets/activnew.php:)
(:includeurl ../../test/iets/activnew.php:)
(:includeurl ../../iets/activnew.php:)

do not work, and yield a blank page.

pmwiki is at http://address.com/projects/test/pmwiki
and allow_url_fopen is On.

Any idea?


More information about the pmwiki-users mailing list