#30557 [Opn->WFx]: Disabled "allow_url_fopen" in php.ini
| From: | derick@php.net | Date: | Tue, 26 Oct 2004 07:50:55 +0000 |
| Subject: | #30557 [Opn->WFx]: Disabled "allow_url_fopen" in php.ini | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-68076@lists.php.net to get a copy of this message | ||
ID: 30557
Updated by: derick@php.net
Reported By: php at bouchery dot com
-Status: Open
+Status: Wont fix
Bug Type: Feature/Change Request
Operating System: all
PHP Version: Irrelevant
New Comment:
Sorry, but we can not simply change the default value as there might be
scripts out there that rely on this; and we can not simply break them.
Previous Comments:
------------------------------------------------------------------------
[2004-10-26 09:30:29] php at bouchery dot com
Description:
------------
Currently, there are too many people writing news and blogs about the
"huge" PHP security hole introduce by "include" and "allow_url_fopen".
This mistake is so simple to avoid, but beginners are not so informs
and I think it could be simplest to disable this option
(allow_url_fopen) in the default php.ini.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=30557&edit=1