search

davidvrodrigues / vqmod

Automatically exported from code.google.com/p/vqmod
0 stars 0 forks source link

Alert with Suhosin, vqmod execution blocked #128

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
After moving our OpenCart project to our Debian web server, the PHP Suhosin 
extension blocked execution of vqmod.

Error from Suhosin in the syslog (IP deleted): 
 ALERT - Include filename ('var://admin_view_template_common_header_tpl') is an URL that is not allowed (attacker '87.xx.xx.xx', file '/var/www/alveus/vqmod/vqcache/vq2-system_engine_controller.php', line 116)

vQmod Version: 2.3.2
Server Operating System: Debian

As the error log says, the use of the "var://" url in the script seems to cause 
this error. Maybe there is a way to make it work with Suhosin?

Disabling Suhosin will make the project work.

Original issue reported on code.google.com by c.von.ap...@movendor.com on 27 Aug 2013 at 3:27

GoogleCodeExporter commented 8 years ago 
That is not vQmod, that is an extension or OpenCart itself. vQmod doesn't use 
var:// at all

Original comment by DJG6...@gmail.com on 27 Aug 2013 at 3:59