Nooku Framework

Server running suhosin patch

Nooku Framework has problems with the Suhosin patch.

[error] [client 192.168.3.2] ALERT - Include filename 
('tmpl:///var/www/joomla/components/com_foo/views/people/tmpl/default.php')
is an URL that is not allowed (attacker '192.168.3.2', 
file '/var/www/joomla/plugins/system/koowa/view/abstract.php', line 418)

To fix this add the following to your php.ini file if you are using suhosin :

suhosin.executor.include.whitelist = tmpl://, file://

Remember that you likely need to add this to a php.ini file in your joomla root folder, and your /administrator/ folder.

And some .ini users might need to also add session.save_path = /tmp.

If the user can't use .ini configuration files, here's how to do it by .htaccess

<IfModule mod_php.c> 
    php_value suhosin.executor.include.whitelist tmpl://, file:// 
</IfModule> 

For more info on the discussion : http://groups.google.com/group/nooku-framework/browse_frm/thread/10d526547d12e541/cab8643fb63c379a

Issues with PHP versions

• PHP 5.2.5. : Bug in get_class_methods prevents KObject getMethods from working correctly. See : http://bugs.php.net/43483

This issue was also reported for PHP 5.2.4 : see http://groups.google.com/group/nooku-framework/browse_thread/thread/cba65e75ce04d857/0a3a7c5ad1d62762#0a3a7c5ad1d62762

This issue was solved in revision:2648

Upgrading ionCube loaders on shared hosts

Nooku Framework does not require or use ionCube loaders at all. But, a but in the loaders that we reported were fixed in a fairly recent version, requiring servers that have ionCube loaders loaded to be on a recent enough build.

If you're on a shared host and unable to update ionCube yourself, or the host refuses to do so, there's still an option for you on how to do it manually using php.ini.

Go to this page http://www.ioncube.com/loaders.php and download the Linux (or whatever your platform is) package Now unpack it on your local computer, then using FTP create an ioncube/ directory in your Joomla main folder. In this directory copy the file ioncube_loader_lin_5.3.so contained in the package. Then create a file called php.ini in both the joomla root and the administrator/ folder and set this file path of the ionCube loader like this:

zend_extension="/PATH_TO_SITE/ioncube/ioncube_loader_lin_5.3.so"