• Resolved werdpres

    (@werdpres)


    open_basedir	On ( /home/admin/:/tmp/:/var/tmp/:/opt/alt/php73/usr/share/pear/:/dev/urandom:/usr/local/php73/lib/:/usr/local/php73/lib/:/usr/local/lib/php/ )
    Redirects may be detected as broken links when open_basedir is on.

    i know little about this other than there’s apparently some sort of security issue associated with open_basedir

    how can this be resolved?

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support Dimitris – WPMU DEV Support

    (@wpmudev-support6)

    Hello @werdpres

    Not sure if this is related with the Broken Link Checker plugin.
    Is this the complete error message?
    Please have a look below about this restriction:
    https://www.agentwp.com/open_basedir-restriction-in-effect-error-in-wordpress
    https://www.ads-software.com/support/topic-tag/open_basedir/

    Thank you,
    Dimitris

    Thread Starter werdpres

    (@werdpres)

    hi Dimitris

    the message i quoted isn’t exactly an error message – it’s from BLC settings -> general -> debug

    in php.ini open_basedir is commented out…
    ;open_basedir =

    a php info file for open_basedir tells me…

    /home/admin/:/tmp/:/var/tmp/:/opt/alt/php73/usr/share/pear/:/dev/urandom:/usr/local/php73/lib/:/usr/local/php73/lib/:/usr/local/lib/php/

    i don’t want to disable open_basedir because of the security issues, so i’m at a loss as to what to do

    it’s my understanding BLC needs to write to /var/tmp, but that’s already defined so i don’t understand the warning

    indeed it appears that BLC is marking all redirects as broken

    Plugin Support Imran – WPMU DEV Support

    (@wpmudev-support9)

    Hello @werdpres

    I trust you’re doing well!

    This error, it doesn’t mean that it 100% will show redirects as broken. Looks like the Broken Link Checker checks if open_basedir is not set to none, in which case it informs about this with that message. It won’t be able to follow redirects if redirect has other possible redirects, since CURLOPT_FOLLOWLOCATION is set to true.

    Would you please check if any of the broken links is redirecting by clicking on them before these are removed/edited.

    Please advise,

    Kind regards,
    Nastia

    Thread Starter werdpres

    (@werdpres)

    singling out redirects may be incorrect on my part – it looks like “broken” links that aren’t broken are being listed as 404

    looks like many/all of these are links to archived pages

    example working URL:
    https://archive.vn/20170424130428/https://la.indymedia.org/news/2003/04/47530_comment.php

    this exact link is marked as broken in BLC – there’s over 300 of them

    as for what is/was going on with redirects, i don’t know – i haven’t changed with open_basedir and before there were tons of redirects listed as broken, but after i flushed the DB it looks like all is ok at the moment

    Plugin Support Dimitris – WPMU DEV Support

    (@wpmudev-support6)

    Hello @werdpres

    That’s strange because the above link first gives me a security warning, then a 403-forbidden error. Can you please double-check from your end? Please advise!

    Thank you,
    Dimitris

    Thread Starter werdpres

    (@werdpres)

    my browser doesn’t give any warnings and they’re using a valid Let’s Encrypt cert

    are you warned when you visit archive.vn or archive.is? if so, there may be something wrong on your end

    there’s now 582 of these – here’s more examples…

    
    https://archive.is/6jDZz
    https://archive.vn/zl2Uz
    https://archive.is/20150516104658/https://www.wanttoknow.info/mediacorruption
    
    
    Plugin Support Dimitris – WPMU DEV Support

    (@wpmudev-support6)

    Hello @werdpres

    It seems that both sites are using ReCaptcha to validate real human traffic:
    https://monosnap.com/file/KsMQPHvKU2xgiYCXcOp7uIvrKbdr8Z
    https://monosnap.com/file/NsGVH6oyI8UKbgspATuRl0ZUqFTZIa

    So even though these sites may be visible to real visitors (ReCaptcha won’t display to everyone, but if you refresh a couple of times the same URL you should also get it eventually), they disallow access to services/apps like Broken Link Checker that try to get a response from site via code and not from browser.

    Hope that clarifies things better. ??

    Warm regards,
    Dimitris

    Thread Starter werdpres

    (@werdpres)

    hi Dimitris
    yes, that makes sense, however it’s not an ideal situation

    i’ve noticed this kind of problem before with other domains and i thought it may have been the UA that BLC uses, but it looks like there’s more going on than that

    what do you think you might be able to address such an issue if anything?

    [Moderator note: Please, No bumping.]

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘php ‘open_basedir’ warning’ is closed to new replies.