Solution to use URLDownloadToFileA Lib "urlmon.dll" on Win10

[Roger Cabo]

Hi everyone,

unfortunately the function URLDownloadToFileA Lib "urlmon.dll" does not work on a fresh Windows 10 installation without changing a key in the registry.

The advantage of URLDownloadToFileA is the ability to download the default SLL cache if the url does not contain a proper filename and extension like ".html"

For example strURL$ = "unity3d.com/get-unity/download/archive" in this case you got the error -2146697208 in Win10, because of any missing file name.

But in some cases you don't want to download a specified file like above.

The registry:
// Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages = 0

Windows 10 has disabled downloading the cache content by default to prevent downloading any content like *.php or *.asp has produced output by the webserver.

With DisableCachingOfSSLPages = 1 it works fine again.
Now its possible to get the content from the cache file again automatically.

If you now use URLDownloadToFileA with a url "https://unity3d.com/get-unity/download/archive" you get content is indirect created by the url or script behind, as well.

Example:

Attachments:

geturl.g32 (1.65 KB)

[(X)]

This adds another layer of sophistication to managing communications with the internet.

I tried geturl.g32 and found no difference with trying to get a response from: "https//sonnenuntergang-zeit.de/"

But, I did find a similar site that did respond: "https://www.sunrise-and-sunset.com/de"

Why one is "tight lipped" and the other is not is beyond me at this time. I can only guess they have their "shields up" or something.

Anyway, thanks for the suggestion. Another tool for my "bag of tricks"!

[dragonjim]

The registry:
// Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages = 0

Windows 10 has disabled downloading the cache content by default to prevent downloading any content like *.php or *.asp has produced output by the webserver.

With DisableCachingOfSSLPages = 1 it works fine again.
Now its possible to get the content from the cache file again automatically.

A good find.

Just a note of caution: Microsoft disables this form of downloading for security reasons. So keep this in mind when using this fix, especially if you are going to embed it into a program used by the less technically and security savvy.

It is a shame you need to restart Windows once you have reset the registry key; otherwise you could just switch it back on afterwards.

[(X)]

I asked BING:

Would you say it is 'safer' if this option is 'enabled' set to 1, so effectively the SSL caching is not done?

BING's answer:

It depends on your preference and security needs.

If you enable the option to disable caching of SSL pages, you will prevent IE from storing any sensitive information on your disk, such as passwords, credit card numbers, or personal data. This can protect you from unauthorized access or theft of your data. However, it also means that you will have to reload the SSL pages every time you visit them, which can slow down your browsing experience and consume more bandwidth.

If you disable the option, you will allow IE to cache the SSL pages on your disk, which can improve your browsing speed and save your bandwidth. However, you also risk exposing your data to anyone who can access your disk, such as hackers, malware, or other users of your computer.

Therefore, you should weigh the pros and cons of each option and choose the one that suits your situation best. You can also clear your cache and history files regularly to reduce the risk of data leakage.

[Roger Cabo]

CHAT GPT4.0:

Q;
Why does setting the registry key DisableCachingOfSSLPages to 0 in Windows not pose a significant risk for storing sensitive information transmitted over SSL/TLS connections in the browser cache?

GPT4.0:

Registry key DisableCachingOfSSLPages: When set to 0, Windows allows the caching of SSL pages. However, this mainly refers to the content of the page itself (such as HTML, CSS, JavaScript) and not the sensitive data transmitted over these pages. The actual sensitive information that is transmitted over SSL/TLS connections is not stored in the browser cache.

[Roger Cabo]

After several test I was able to access Bing with a search term and get the complete result without login to Bing.

---

The program calls Bing by your standard web browser.. in my case its brave or Firefox.

And open the standard browser with the result

Works!

// URLDownloadToFileA V1.01

$Library "gfawinx"
$Library "UpdateRT"
UpdateRuntime      ' Patches GfaWin23.Ocx

Declare Function URLDownloadToFileA Lib "urlmon.dll" Alias _
 "URLDownloadToFileA" (ByVal pCaller As Long, _
 ByVal szURL As String, _
 ByVal szFileName As String, _
 ByVal dwReserved As Long, _
 ByVal lpfnCB As Long) As Long

Dim strURL$ = "https://www.bing.com/search?q="
Dim postStrURL$ = "&qs=n&form=QBRE"

// Search Term "
Dim SarchTerm$ = "gfabasic32"
// Result URL "
Dim ResultURL$ = strURL$ + SarchTerm$ + postStrURL$

Dim localFile$ = App.Path + "\test.html"
Dim lngRetVal As Long
Dim lngRetVal = URLDownloadToFileA(0, ResultURL$, localFile, 0, 0)

// ... Check the error if caching is disabled
// ... Regedit settings to get it work
// ... Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
// ... Key "DisableCachingOfSSLPages" = "0"

If lngRetVal = -2146697208
 
 Dim key$ = "\\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings"
 Dim hkey$ = OpenRegKey(key$)
 Dim hKeyName$ = "DisableCachingOfSSLPages"
 Dim i%
 Dim hKeyValueInt%, rtype%
 For i% = 1 To GetRegValCount(hkey)
   If( Lower$( GetRegValName(hkey, i)) = Lower$(hKeyName))
     
     hKeyValueInt% = GetRegVal(hkey, i, Int)
     
     // ... Is caching disabled?
     If (hKeyValueInt% = 0)
       // Yes
       SaveSetting  hkey$, "", hKeyName, "1"
       MsgBox "Please restart Windows."
       
     EndIf
   EndIf
 Next i
 CloseRegKey(key$)
EndIf

If lngRetVal = 0
 Dim f$
 Open  localFile for Input As # 1
 f = Input$(LOF(# 1), # 1)
 Close # 1
 
EndIf

Debug lngRetVal

OpenHTMLFile(localFile)

Sub OpenHTMLFile(filePath As String)
 ~ShellExec(filePath, "")
End Sub


 

[(X)]

Can you get an answer from Bing Chat? (in Precise Mode for example?)

[Roger Cabo]

It seems the chat frame is not accessible.. not possible..

[(X)]

I assume they want $$$ for that functionality... Which is understandable.

[Roger Cabo]

Yes.. also prevent extra traffic and machine resources because 100.000.000 programmers like us try to access their server at the same time.