Jeckky / dompdf

Automatically exported from code.google.com/p/dompdf
0 stars 0 forks source link

User input has been disabled for remote connections. #399

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Please tell me how to active remote connections. Already changed some lines 
inside dompdf_config.inc 

def("DOMPDF_ENABLE_REMOTE", true);

Original issue reported on code.google.com by pradipta...@gmail.com on 25 Dec 2011 at 1:50

GoogleCodeExporter commented 9 years ago
So you can't access remote resources? Using dompdf 0.6.0? Check out 
dompdf/www/setup.php for any red flags.

If I were to guess I'd say that the PHP setting allow_url_fopen is set to 
false. This way dompdf accesses resources requires that this setting be true.

Original comment by eclecticgeek on 27 Dec 2011 at 1:58

GoogleCodeExporter commented 9 years ago
Hello, this message appears only in the demo page, when not accessed from 
localhost, where there should be a textarea like here 
http://eclecticgeek.com/dompdf/docs/examples.php#demo

It was locked for security reasons, because anyone could convert any HTML using 
your server. If you still want to enable it, you can change the code in 
www/demo.php

Original comment by fabien.menager on 27 Dec 2011 at 9:32

GoogleCodeExporter commented 9 years ago
What steps does one need to do to unlock it and allow remote connections for 
testing?

Original comment by jeff.c...@gmail.com on 5 Jun 2012 at 9:17

GoogleCodeExporter commented 9 years ago
What kind of testing do you need to do? You can easily write a script that will 
allow you to perform testing, which is what we recommend in order to perform 
input sanitation and not be exposed to the possibility of exploit or social 
engineering.

That being said, if you want to re-enable the functionality for universal 
access look at the source of demo.php. What you need to change should be 
obvious.

Original comment by eclecticgeek on 7 Jun 2012 at 1:18

GoogleCodeExporter commented 9 years ago

Original comment by eclecticgeek on 30 May 2013 at 5:16