MFA auth error when using codes from app

[krolli]

Script URL: -
Version of script: 3.5.1
Hosting company: -
URL of phpinfo.php: -
URL of session_test.php: -
What terms did you try when SEARCHING for a solution: -

Write your message below:

Hi! After updating the Hesk to v3.5.1 i get the following error, after login (and using MFA codes from 2FA app):

Code: Select all

PHP Warning:  fopen(): https:// wrapper is disabled in the server configuration by allow_url_fopen=0 in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php on line 56
PHP Warning:  fopen(https://google.com): Failed to open stream: no suitable wrapper could be found in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php on line 56
PHP Fatal error:  Uncaught TypeError: stream_get_meta_data(): Argument #1 ($stream) must be of type resource, bool given in .../vendor/robthree/twofactorauth/lib/Providers/Time/HttpTimeProvider.php:57

Is there a workaround, without enabling allow_url_fopen (for security reasons)?

Note: MFA codes through apps worked fine on the previous version.

Thanks.

[Klemen]

The MFA code didn't change, you will need to enable allow_url_fopen (it shouldn't be a security issue; the allow_url_include is the problematic one).