Update Error - scorcher

chrisonline

The issue

I wanted to update Flarum to the latest 1.x release.
Currently I am on 1.8.1

If I call composer update I get following strange warning from a website I don't know.
I have searched all files and extensions and didn't find scorcher.

Can someone help?

Loading composer repositories with package information

In Config.php line 582:

Your configuration does not allow connections to http://scorcher.ru/arts/. See https://getcomposer.org/doc/06-config.md#secure-http for details.

Flarum information

Flarum core: 1.8.1
PHP version: 8.2.28
MySQL version: 10.11.11-MariaDB
Loaded extensions: Core, date, libxml, pcre, ctype, dom, fileinfo, filter, hash, json, mbstring, pcntl, SPL, session, PDO, random, readline, Reflection, standard, SimpleXML, tokenizer, xml, xmlreader, xmlwriter, mysqlnd, bcmath, bz2, calendar, curl, dba, exif, ftp, gd, gettext, gmp, iconv, imap, intl, ldap, mailparse, memcached, mysqli, openssl, pdo_dblib, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, zlib, posix, shmop, soap, sodium, sockets, sqlite3, ssh2, sysvmsg, sysvsem, sysvshm, xsl, Phar, zip
+------------------------------+---------+--------+
| Flarum Extensions            |         |        |
+------------------------------+---------+--------+
| ID                           | Version | Commit |
+------------------------------+---------+--------+
| flarum-flags                 | v1.8.0  |        |
| flarum-approval              | v1.8.0  |        |
| flarum-suspend               | v1.8.0  |        |
| flarum-subscriptions         | v1.8.0  |        |
| flarum-tags                  | v1.8.0  |        |
| fof-user-directory           | 1.2.3   |        |
| fof-upload                   | 1.2.3   |        |
| fof-pretty-mail              | 1.1.1   |        |
| fof-oauth                    | 1.4.1   |        |
| fof-links                    | 1.1.4   |        |
| fof-follow-tags              | 1.1.7   |        |
| fof-drafts                   | 1.2.2   |        |
| fof-default-user-preferences | 1.2.0   |        |
| flarum-sticky                | v1.8.0  |        |
| flarum-statistics            | v1.8.0  |        |
| flarum-pusher                | v1.8.0  |        |
| flarum-mentions              | v1.8.0  |        |
| flarum-markdown              | v1.8.0  |        |
| flarum-lock                  | v1.8.0  |        |
| flarum-likes                 | v1.8.0  |        |
| flarum-lang-english          | v1.8.0  |        |
| flarum-emoji                 | v1.8.0  |        |
| flarum-bbcode                | v1.8.0  |        |
+------------------------------+---------+--------+
Installation path: /volume2/web/flarum
Queue driver: sync
Session driver: file
Scheduler status: Never run
Mail driver: smtp
Debug mode: off

KBExit

chrisonline that url doesn't just randomly appear without it explicitly being inputted somewhere. Further, your extensions don't warrant it to be mentioned anywhere.
Check your auth.json file in the Flarum root directory. Tell me if you see the URL inputted there.
Further, how did you get Flarum installed? Did you use the official flarum instructions and nothing else?

chrisonline

@KBExit Yes I know this is why I am very confused. I don't have added such url anywhere as far as I know.
The installation is very old and runs on a Synology NAS with Webstation.

The installation was a few years ago and I have used the official flarum instructions.

In the root of flarum directory I don't have an auth.json file.

clarkwinkelmann

Assuming it's a custom repository URL, it will be defined either in the forum composer.json, or the global composer.json in COMPOSER_HOME (exact location depends on operating system)

Otherwise it might be part of a hook defined by one of the extensions.

On any case it must be old, because it doesn't use HTTPS and that's why Composer is complaining about it.

chrisonline

Thanks I think I found it in composer.json.

There is this repository:
"repositories": {
"flagrow": {
"type": "composer",
"url": "https://flagrow.io/satis",

And flagrow.io/statis opens also the same site. So this could be the problem.
But I don't find any extension named flagrow.

Is it save to delete the repository path in composer.json? Or how can I remove this?

KBExit

chrisonline just rename all of the flagrow items to floxum.com and save it. Then run composer update

floxum.com/composer

chrisonline

Great now the error is gone and I need to check the php.ini, but at least the strange one is removed.
Thanks!