file inclusion error about dvwa HOT 7 CLOSED

It looks like you aren't running the latest version of DVWA

This is line 77 along with context and that line is not going to throw the error you are seeing.

 70 
 71     session_set_cookie_params([
 72         'lifetime' => $maxlifetime,
 73         'path' => '/',
 74         'domain' => $domain,
 75         'secure' => $secure,
 76         'httponly' => $httponly,
 77         'samesite' => $samesite
 78     ]);
 79 
 80     session_start();
 81 

Get the latest version of the app from this repo and try again.

from dvwa.

I tried two ways to download latest version , one for downloading code zip , one for git clone ,
the following picture shows how i git clone

and then i copy it into apache2 and restart apache2

but it shows the same error

the following picture shows /var/www/html/DVWA/dvwa/includes/dvwaPage.inc.php

btw, i don't understand why it can report this error either :(
it seems there is no array to string in line 77

from dvwa.

Let's just check that you are looking at the right file. Edit /var/www/html/DVWA/dvwa/includes/dvwaPage.inc.php and insert three lines of empty comments at the top of the file.
If the report is coming from this file, then the error should move to line 80, if it stays at 77 then something else is going wrong.

from dvwa.

i insert four blank at the top

and it shows in line 81 now

from dvwa.

Got it, I think you might be running a version of PHP earlier than 7.3, can you check.

The definition of session_set_cookie_params changed from taking individual parameters to being able to take an array with named parameters from 7.3:

https://www.php.net/session_set_cookie_params

Version 7.2 reached end of life in 2020 so I'll count this as an unsupported version and ask you to upgrade to a newer version of php.

from dvwa.

I see.
My linux is ubuntu18.04 and apt-get only supply php7.2
i'll upgrade my system to 20.04 and try again
anyway ,thank you very much for your answering

from dvwa.

Problem solved.

from dvwa.