--disable-url-fopen-wrapper gone?
| From: | Marten Lehmann | Date: | Tue, 05 Oct 2004 17:03:45 +0000 |
| Subject: | --disable-url-fopen-wrapper gone? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-198695@lists.php.net to get a copy of this message | ||
Hello,
one account of a user on our webserver was compromised using a feature of fopen to load external sources. As of the documentation, there shall be a configure option called "--disable-url-fopen-wrapper". Unfortunately, this option doesn't seem to exist in 4.3.9. How can I set a default for allow_url_fopen during the compilation? Or is the only way to set
allow_url_fopen=0
in the master php.ini?
Regards
Marten