Re: Re: allow_url_fopen should be INI_ALL
| From: | Derick Rethans | Date: | Mon, 27 Jun 2005 07:11:11 +0000 |
| Subject: | Re: Re: allow_url_fopen should be INI_ALL | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-16920@lists.php.net to get a copy of this message | ||
On Mon, 27 Jun 2005, Yasuo Ohgaki wrote:
> I think most of us can agree following statement
>
> "allow_url_fopen = ON" is dangerous and the feature is not
> useful most of the times.
I disagree. With proper filtering, or using non-user-supplied
information there is no problem.
Derick
--
Derick Rethans
http://derickrethans.nl | http://ez.no | http://xdebug.org