note 107730 added to function.libxml-disable-entity-loader

Using this function you can prevent a vulnerable to Local and Remote File Inclusion attacks. You'll see it in an example where I load and validate the following string: <!DOCTYPE scan [<!ENTITY test SYSTEM "php://filter/read=convert.base64-encode/resource=/etc/passwd">]> <scan>&test;</scan> One way to prevent that the file in given back is to set this value to 0. Please take a closer look at the release of symfony 2.0.11 ---- Server IP: 69.147.83.197 Probable Submitter: 88.89.100.134 ---- Manual Page -- http://www.php.net/manual/en/function.libxml-disable-entity-loader.php Edit -- https://master.php.net/note/edit/107730 Del: integrated -- https://master.php.net/note/delete/107730/integrated Del: useless -- https://master.php.net/note/delete/107730/useless Del: bad code -- https://master.php.net/note/delete/107730/bad+code Del: spam -- https://master.php.net/note/delete/107730/spam Del: non-english -- https://master.php.net/note/delete/107730/non-english Del: in docs -- https://master.php.net/note/delete/107730/in+docs Del: other reasons-- https://master.php.net/note/delete/107730 Reject -- https://master.php.net/note/reject/107730 Search -- https://master.php.net/manage/user-notes.php