Re: allow_url_fopen & allow_url_include

From: Date: Tue, 03 Mar 2009 22:36:31 +0000
Subject: Re: allow_url_fopen & allow_url_include
References: 1 2 3 4 5 6  Groups: php.general 
Request: Send a blank email to php-general+get-289200@lists.php.net to get a copy of this message
    allow_url_fopen is not a security issue - it only returns the code,
    it does not execute it.
    But yes you can use curl instead of relying on allow_url_fopen.
Well, allow_url_fopen is really a security issue. A renowned programmer (http://hasin.wordpress.com) said it could even cause DoS(Denial of Service) for the running server.
So can curl. -- Postgresql & php tutorials http://www.designmagick.com/

« previous php.general (#289200) next »