Cusermenu.txt LoadUtilsReport does not show my php pages in iframe

[lse-cumulus]

I have the problem that my own php pages are not showing up when using CuserMenu and loading them via LoadUtilsReport into an iframe.
I am testing with Menue -> Forecast -> Forecast Test and the underlying file Forecast.Test.txt:

a) not working via iframe, but working fine when called via external link directly, regardless if done via http or https/ssl:
<iframe src="https://leonas.ddns.net/Wetterstation.S ... recast.php" width="100%" frameborder="0" style="border:0;height:75vh;"></iframe>

b) on the other hand the following php links from other sites are working fine in my iframe window:
<iframe src="https://www.hc-iom.co.uk/wxsim3/forecast.php" width="100%" frameborder="0" style="border:0;height:75vh;"></iframe>
or
<iframe src="https://www.nordicweather.net/ewnennust ... 16.0691162" width="100%" frameborder="0" style="border:0;height:75vh;"></iframe>

I guess the problem is not related to CumulusUtils but to my webserver setup on a Synology NAS (Apache via old PHP version 5.3.27), but I could not find the root cause. Changing PHP security setup and checking my URL header for x-frame-options did not bring any success.
Any input would be welcome. thx. leo.

https://leonas.ddns.net/Wetterstation.S ... recast.php
Array ( [0] => HTTP/1.1 200 OK [1] => Date: Thu, 20 Apr 2023 07:37:31 GMT [2] => Server: Apache [3] => Vary: Accept-Encoding [4] => Connection: close [5] => Content-Type: text/html; charset=UTF-8 )
Array ( [0] => HTTP/1.1 200 OK [Date] => Thu, 20 Apr 2023 07:37:31 GMT [Server] => Apache [Vary] => Accept-Encoding [Connection] => close [Content-Type] => text/html; charset=UTF-8 )

[lse-cumulus]

Update: The problem with not showing up most php pages withing LoadUtilsReport iframe is only happening with Chrome-Browser.
when testing with other browsers: IE, Edge, Firefox and Opera, my php page http(s)://leonas.ddns.net/Wetterstation.Suttenbrunn.CumulusMX/wxsim-ewn/forecast.php is displayed fine also in the LoadUtilsReport iframe.
Unfortunately no errors are shown in the chrome browser developer tools console.
So I suggest to close this topic.

[HansR]

Sorry I overlooked the post from 20 april, I'll have a look at it. Ignoring Chrome is not what I want to do. It is a too important browser.

[HansR]

I used your iframe code (nr 1 in your first post) and created a menu item for it on my test system (menu: Maps=>Test).

It works fine for me under my system.
Now if you can't see it in your Chrome browser you'll have to investigate your browser system.
If it does show correctly for you in your Chrome browser you'll probably have to investigate your server system.

I must say that PHP version 4 seems too low. I don't know what type of NAS you are using but my Synology supports PHP 8.

Anyway: the Iframe construction and the link are correct and indeed it is not CUtils

BTW: see also viewtopic.php?p=163221#p163221

[HansR]

Please note that WxSim is also a legal keyword in the forecast possibilities for the Forecast module.

[lse-cumulus]

Hans, Thx for your feedback.
I tested my php site link included in your test system menue: (menu: Maps=>Test) from https://meteo-wagenborgen.nl/CMX4/:
a) does not work in my chrome-browser.
b) but works of course with other browser.

So conclusion: I have to check MY chrome-browser setup (and not my NAS webserver setup). As chrome is my standard default browser I have enabled the most security issues in chrome over the time and have to lift some restrictions. Just have to find out which of my chrome browser settings to adapt.
Based on your link input with nosame-cookie, I tried to allow again all cookies, but it is not that easy.

Thx for the hint about the wxsim option in the forecast module; I will test it out.

About PHP:
I know that my version 5.3.27 is quite old. I have to upgrade my DSM version first to get a higher PHP version (or add a new NAS box in the future ...).
In the meantime I got some php scripts (https://discourse.weather-watch.com/t/h ... p5-3/71293) working under my old PHP version. I also made some upward compatible changes to the cumulusMX upload.php script that allows it to run with older PHP version instead of FTP. If you are interested I could send you the modified script (maybe in another topic thread).

[HansR]

Hans, Thx for your feedback.
I tested my php site link included in your test system menue: (menu: Maps=>Test) from https://meteo-wagenborgen.nl/CMX4/:
a) does not work in my chrome-browser.
b) but works of course with other browser.

So conclusion: I have to check MY chrome-browser setup (and not my NAS webserver setup). As chrome is my standard default browser I have enabled the most security issues in chrome over the time and have to lift some restrictions. Just have to find out which of my chrome browser settings to adapt.
Based on your link input with nosame-cookie, I tried to allow again all cookies, but it is not that easy.

Yes, that seems the logical step. Can't help you there because there are far too many settings in Chrome

Thx for the hint about the wxsim option in the forecast module; I will test it out.

Good, let me know how you get on.

About PHP:
I know that my version 5.3.27 is quite old. I have to upgrade my DSM version first to get a higher PHP version (or add a new NAS box in the future ...).
In the meantime I got some php scripts (https://discourse.weather-watch.com/t/h ... p5-3/71293) working under my old PHP version. I also made some upward compatible changes to the cumulusMX upload.php script that allows it to run with older PHP version instead of FTP. If you are interested I could send you the modified script (maybe in another topic thread).

Actually, I don't do PHP and I actually avoid it.

But I invite you publish here or in your own thread on this forum about your results and/or keep an eye on users who have a similar issue. PHP is often used as a tool for legacy software (notably the beteljuice dayfile reader) and other templates so no doubt there are other.

NOTE: I don't think modifying the upload.PHP script is wise as it is part of the CMX distribution. Really, updating your PHP is a better action. Updating OS and other software regularly is really a good habit. You don't need to follow straight away but twice a year an update exercise is not bad.

[lse-cumulus]

CumulusUtils Forecast Module acitvated for Wxsim in CumulusUtils.ini and working fine via menue Misc. -> Forecast in iframe.
[Forecasts]
ForecastSystem=WxSim
WXsimURL=https://leonas.ddns.net/Wetterstation.S ... /sivu2.php

of course it only works with the above mentioned browser setup issue limitation:
for firefox I found out, that the following setting works to show php page in iframe: Settings -> Privacy & Security -> Enhanced Tracking Protection -> Standard (and not strict)
for chrome setup still investigating; seems to be a combination of multiple settings and not just one.

[HansR]

CumulusUtils Forecast Module acitvated for Wxsim in CumulusUtils.ini and working fine via menue Misc. -> Forecast in iframe.
[Forecasts]
ForecastSystem=WxSim
WXsimURL=https://leonas.ddns.net/Wetterstation.S ... /sivu2.php

Good, working for me.

of course it only works with the above mentioned browser setup issue limitation:
for firefox I found out, that the following setting works to show php page in iframe: Settings -> Privacy & Security -> Enhanced Tracking Protection -> Standard (and not strict)
for chrome setup still investigating; seems to be a combination of multiple settings and not just one.

Try a full reset of chrome and then change parameters one by one (while taking care for a cache effect)

[lse-cumulus]

I did find out the culprit and solved the chrome browser setup issue that php pages were not displayed in iframe/LoadUtilsReport window.
a) chrome settings -> reset settings: Iframe worked immediately
b) switched back on my chrome settings again one by one: and all are working fine and still allow iframe
privacy&security -> cookies -> block 3rd party cookies (and allow some exceptions for certain sites)
-> clear all cookies when close all windows
privacy&security -> security -> standard protection
-> use secury DNS (with cloudflare or google)
privacy&security -> site settings -> content -> allow javascript
-> block popups (and allow some exceptions for certain sites)
c) so the problem was caused by a chrome extions:
had to disable extension uBlock Origin
while the following extension do not cause a problem: Kaspersky, adBlock, decentralEyes, I don't care about cookies

[HansR]

I did find out the culprit and solved the chrome browser setup issue that php pages were not displayed in iframe/LoadUtilsReport window.
a) chrome settings -> reset settings: Iframe worked immediately
b) switched back on my chrome settings again one by one: and all are working fine and still allow iframe
privacy&security -> cookies -> block 3rd party cookies (and allow some exceptions for certain sites)
-> clear all cookies when close all windows
privacy&security -> security -> standard protection
-> use secury DNS (with cloudflare or google)
privacy&security -> site settings -> content -> allow javascript
-> block popups (and allow some exceptions for certain sites)
c) so the problem was caused by a chrome extions:
had to disable extension uBlock Origin
while the following extension do not cause a problem: Kaspersky, adBlock, decentralEyes, I don't care about cookies

OK, thanks, that's worthwhile information, also for others. I use the Malwarebytes / Browserguard which also does not have problems.
Maybe it is worth starting a thread in Website - General for disturbing software.

But are you saying you use uBlock, Kaspersky, adBlock and decentralEyes all at the same time? Isn't that a bit paranoia and overdone?
I only have one system protection and one Browsing protection. So far that has been enough.
You must have some confidence isn't it?