DVWA setup PHP function allow_url_include: Disabled

Question

I'm setting up DVWA on Windows via XAMPP, and I've searched in Google for about 24 hours - I cannot seem to find the answer.

My problem is setting up the server:

PHP function `allow_url_include: Disabled`

My config file says it's enabled. Could it have something to do with my ports? Should I set up my server for outside access to my router, or is the internal IP access enough?

When setting up my server I get this:

Database Setup

Click on the 'Create / Reset Database' button below to create or reset your database.

If you get an error make sure you have the correct user credentials in: C:\XAMPP\htdocs\dvwa/config/config.inc.php

Setup Check Operating system: Windows Backend database: MySQL PHP version: 5.5.30

Web Server SERVER_NAME: 192.168.0.13

PHP function display_errors: Enabled (Easy Mode!) PHP function safe_mode: Disabled PHP function allow_url_include: Disabled PHP function allow_url_fopen: Enabled PHP function magic_quotes_gpc: Disabled PHP module php-gd: Installed

reCAPTCHA key: Missing

Writable folder C:\XAMPP\htdocs\dvwa/hackable/uploads/: Yes) Writable file C:\XAMPP\htdocs\dvwa/external/phpids/0.6/lib/IDS/tmp/phpids_log.txt: Yes

Status in red, indicate there will be an issue when trying to complete some modules.

Answer 1

To solve the issue, go to:

C:\xampp\php\php.ini

And change:

allow_url_include=Off

To:

allow_url_include=On

Then go to:

C:\xampp\htdocs\DVWA\config\config.inc.php

And change:

$_DVWA[ 'recaptcha_public_key' ]  = ' ';
$_DVWA[ 'recaptcha_private_key' ] = ' ';

Into:

$_DVWA[ 'recaptcha_public_key' ]  = '6LdK7xITAAzzAAJQTfL7fu6I-0aPl8KHHieAT_yJg';
$_DVWA[ 'recaptcha_private_key' ] = '6LdK7xITAzzAAL_uw9YXVUOPoIHPZLfw2K1n5NVQ';