Forum Moderators: coopster

Message Too Old, No Replies

security implications of 'allow url fopen = On'

         

edzillion

3:51 pm on Feb 4, 2008 (gmt 0)

10+ Year Member



Had to edit my php.ini to
'allow_url_fopen = On'
After searching around I gather there are some security issues that could arise from allowing this.
What are they?
What steps should I take?
Thanks
Ed

eelixduppy

7:07 pm on Feb 4, 2008 (gmt 0)



It's just that it allows outside sources to be used in your programs. Not a big problem assuming your coding methods and practices are secure. This vulnerability comes from bad design and programming, not from the language itself.