#43535 [Com]: parse_ini_file('http://example.com/some.ini') and allow_url_include=off

ID: 43535 Comment by: sskaje at gmail dot com Reported By: sskaje at gmail dot com Status: Open Bug Type: Feature/Change Request Operating System: * PHP Version: 5.2.5 New Comment: [2 Feb 4:41pm UTC] stefan dot walk+php at gmail dot com I don't see how checking for allow_url_fopen instead of allow_url_include is a big change ... ya, stefan, its not a big change, but as you know, all_url_include is recommended to be Off to avoid RFI, if you need to parse an ini file on a remote server without allow_url_include ON, you have to download it before parsing it. So, use allow_url_fopen would bring more convinience than allow_url_include Previous Comments: ------------------------------------------------------------------------ [2009-02-02 16:41:16] stefan dot walk+php at gmail dot com I don't see how checking for allow_url_fopen instead of allow_url_include is a big change ... ------------------------------------------------------------------------ [2007-12-12 10:12:07] jani@php.net This requires changes too big for a bugfix (this is more like a new feature as such) so most likely this will be in PHP 5.3.0 at earliest. ------------------------------------------------------------------------ [2007-12-11 10:01:08] sskaje at gmail dot com There is a ini file on a http server which has something i need on it. so i tried to use parse_ini_file() to get the content and parse it. i set teh 'allow_url_include' Off due to security issue, but i got an error which said that i must turn it On ------------------------------------------------------------------------ [2007-12-10 09:58:56] jani@php.net And what exactly is the problem you have? Currently the file opening for this function happens exactly how a script is opened and I don't think there's anything wrong with that. ------------------------------------------------------------------------ [2007-12-08 13:53:09] sskaje at gmail dot com Description: ------------ parse_ini_file() should not be configured with allow_url_include in php.ini but allow_url_fopen that make me cant directly parse the ini file on http server Expected result: ---------------- nothing Actual result: -------------- nothing ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=43535&edit=1