[pmwiki-users] IncludeUrl problem

[Julius Thyssen]

Hi,

I'm using the includeurl.php cookbook file in pmwiki,
which is working as it should, until I try and make it more secure
by only allowing local addresses.

I have this in the local/config.php:


Markup(
'html',
'fulltext',
'/\\(:html:\\)(.*?)\\(:htmlend:\\)/esi',
"'<:block>'.Keep(str_replace(array('&gt;', '&lt;', '&amp;'),
array('>', '<', '&'), PSS('$1')))");

include_once("$FarmD/cookbook/includeurl.php");
$EnableExternalResource = 0;

And even though it then refuses to allow http and https to be included,
it also ends up showing a blank page when I point to the local address.
I tried absolute paths, I tried every possible option that might parse
the correct file,
buit it keeps giving me a blank page:

(:includeurl http://address.com/projects/test/iets/activnew.php:)

works just fine, but

(:includeurl /var/web/projects/test/iets/activnew.php:)
(:includeurl /projects/test/iets/activnew.php:)
(:includeurl /test/iets/activnew.php:)
(:includeurl /iets/activnew.php:)
(:includeurl ../projects/test/iets/activnew.php:)
(:includeurl ../test/iets/activnew.php:)
(:includeurl ../iets/activnew.php:)
(:includeurl ../../projects/test/iets/activnew.php:)
(:includeurl ../../test/iets/activnew.php:)
(:includeurl ../../iets/activnew.php:)

do not work, and yield a blank page.

pmwiki is at http://address.com/projects/test/pmwiki
and allow_url_fopen is On.

Any idea?
-- 
Adios

Julius
http://jult.net