Page 1 of 1

MFA auth error when using codes from app

Posted: Tue Dec 10, 2024 12:51 am
by krolli
Script URL: -
Version of script: 3.5.1
Hosting company: -
URL of phpinfo.php: -
URL of session_test.php: -
What terms did you try when SEARCHING for a solution: -

Write your message below:

Hi! After updating the Hesk to v3.5.1 i get the following error, after login (and using MFA codes from 2FA app):

Code: Select all

PHP Warning:  fopen(): https:// wrapper is disabled in the server configuration by allow_url_fopen=0 in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php on line 56
PHP Warning:  fopen(https://google.com): Failed to open stream: no suitable wrapper could be found in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php on line 56
PHP Fatal error:  Uncaught TypeError: stream_get_meta_data(): Argument #1 ($stream) must be of type resource, bool given in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php:57
Is there a workaround, without enabling allow_url_fopen (for security reasons)?

Note: MFA codes through apps worked fine on the previous version.

Thanks.

Re: MFA auth error when using codes from app

Posted: Tue Dec 10, 2024 4:18 pm
by Klemen
The MFA code didn't change, you will need to enable allow_url_fopen (it shouldn't be a security issue; the allow_url_include is the problematic one).