note 93230 deleted from features.remote-files by danbrown
| From: | danbrown@php.net | Date: | Sat, 29 Aug 2009 16:55:14 +0000 |
| Subject: | note 93230 deleted from features.remote-files by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-160030@lists.php.net to get a copy of this message | ||
Note Submitter: Abhijit
----
I recommend to keep this directive -- allow_url_fopen to 'Off', when your site goes live.
It resulted in a security break in my application where the contents of a file db.inc were relayed
by the browser , which contained MySQL servers DB credentials. A lesson well learnt by me !