Req #79541 [Opn->Fbk]: Add ini option to disable URLs in getimagesize

Edit report at https://bugs.php.net/bug.php?id=79541&edit=1 ID: 79541 Updated by: requinix@php.net Reported by: mail at tomsommer dot dk Summary: Add ini option to disable URLs in getimagesize -Status: Open +Status: Feedback Type: Feature/Change Request Package: GetImageSize related PHP Version: 7.4.5 Block user comment: N Private report: N New Comment: Thank you for this bug report. To properly diagnose the problem, we need a short but complete example script to be able to reproduce this bug ourselves. A proper reproducing script starts with <?php and ends with ?>, is max. 10-20 lines long and does not require any external resources such as databases, etc. If the script requires a database to demonstrate the issue, please make sure it creates all necessary tables, stored procedures etc. Please avoid embedding huge scripts into the report. Are you passing unvalidated input to getimagesize? If the problem is that someone is giving you a URL and you don't want them to, then the solution is to make sure that you don't let someone give you a URL. Previous Comments: ------------------------------------------------------------------------ [2020-04-29 17:39:28] mail at tomsommer dot dk Description: ------------ Would be great to have a php.ini-option to disable the get-URL functionality in getimagesize(), as it is often a sign of someone providing bad arguments (url instead of path). ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=79541&edit=1