#40651 [Opn->Csd]: Remote file inclusion
| From: | derick@php.net | Date: | Tue, 27 Feb 2007 08:22:08 +0000 |
| Subject: | #40651 [Opn->Csd]: Remote file inclusion | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-109628@lists.php.net to get a copy of this message | ||
ID: 40651
Updated by: derick@php.net
Reported By: florin at flachi dot net
-Status: Open
+Status: Closed
Bug Type: Feature/Change Request
Operating System: Irrelevent
PHP Version: 5.2.1
New Comment:
We already have this:
http://no.php.net/manual/en/ref.filesystem.php#ini.allow-url-include
Previous Comments:
------------------------------------------------------------------------
[2007-02-27 00:40:42] florin at flachi dot net
Description:
------------
Many webhosting companies and not only have a lot of problems because
of the ability of users to include remote files. This can be stopped by
disabling allow_url_fopen but that will also stop to fopen () remote
files. This is widely used by a lot of scripts and users get angry all
the time if we disable allow_url_fopen.
All these things can be solved by creating an option in php.ini to
allow administrators to disable users to include remote files. Thank
you.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=40651&edit=1