note 28472 added to features.remote-files

The easiest way I'd see around the security hold mentioned above would be to turn off allow_url_fopen, using ini_set. If that is not acceptable you can simply str_replace out the :// part that seperates the protocol from the address. include( str_replace("://", "", $whatever) ); should do the trick. -- http://www.php.net/manual/en/features.remote-files.php http://master.php.net/manage/user-notes.php?action=edit+28472 http://master.php.net/manage/user-notes.php?action=delete+28472 http://master.php.net/manage/user-notes.php?action=reject+28472