fopen($file, 'r') and fopen($url, 'ru') and fopen('php://output', 'ru').
What about all other function using streams that do not have fopen arguments? The whole idea of streams was for the things to work transparently with all functions, if it were only about fopen there were no reason to do streams...
To my opinion, using '*://' streams is an advanced feature. Developers
who are using that, should be able to make sure no urls are opened.
Again, all streams exist for that. And if we attempt to restrict local developer (which IMO we should not, but _if_ we do) then we can't rely on him at the same time.
--
Stanislav Malyshev, Zend Products Engineer
stas@zend.com http://www.zend.com/