Re: Re: SOAP SSL support doesn't work when allow_url_fopen is turned off
| From: | George Schlossnagle | Date: | Thu, 28 Jul 2005 13:28:05 +0000 |
| Subject: | Re: Re: SOAP SSL support doesn't work when allow_url_fopen is turned off | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-17440@lists.php.net to get a copy of this message | ||
On Jul 28, 2005, at 9:21 AM, Ilia Alshanetsky wrote:
Zeev Suraski wrote:Maybe - I would say that there are good (non-security-related) reasons for restricting url open elsewhere. I'd rather see a per-extension override that allows you to say exactly what you want occuring. GeorgeAt 01:50 AM 7/28/2005, Ilia Alshanetsky wrote:Why not simply make existing INI option only restrict script loading operations such as include/require, afterall this is what it tries to primarily prevent anyway.What exactly can you do with it other than query remote data sources? I tend to agree with Adam (and I guess Wez) - SOAP should not be affected by allow_url_fopen.Are you therefore saying SOAP support should be 100% diabled when allow_url_fopen is off?SOAP is not disabled, simply prevented from querying remote data sources directly.