allow_url_fopen is not a security issue - it only returns the code,
    it does not execute it.

    But yes you can use curl instead of relying on allow_url_fopen.


Well, allow_url_fopen is really a security issue. A renowned programmer (http://hasin.wordpress.com) said it could even cause DoS(Denial of Service) for the running server.

So can curl.

--
Postgresql & php tutorials
http://www.designmagick.com/


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to