Re: [PHP] Re: patch to php 4.3.10 to disabling URL wrappers in include like statements

2005-03-02 Thread Jason Wong
On Thursday 03 March 2005 03:04, Richard Lynch wrote: > Tom Z Meinlschmidt wrote: > > Tell me - how do you want to turn off remote includes and remain > > remote file working? > > Change the PHP source? > > That's the only viable answer I can think of; though I doubt it's one > you want to hear/use

Re: [PHP] Re: patch to php 4.3.10 to disabling URL wrappers in include like statements

2005-03-02 Thread Richard Lynch
Tom Z Meinlschmidt wrote: > Tell me - how do you want to turn off remote includes and remain remote > file working? Change the PHP source? That's the only viable answer I can think of; though I doubt it's one you want to hear/use. Sorry. > allow_url_fopen turns off _both_. There's no choice wha

Re: [PHP] Re: patch to php 4.3.10 to disabling URL wrappers in include like statements

2005-03-02 Thread Tom Z Meinlschmidt
Tell me - how do you want to turn off remote includes and remain remote file working? allow_url_fopen turns off _both_. There's no choice what to disable tom Jason Barnett wrote: Tom Z. Meinlschmidt wrote: Hi, I've experienced a lot of attacks in my hosting server due to silly users and their scr

Re: [PHP] Re: patch to php 4.3.10 to disabling URL wrappers in include like statements

2005-03-02 Thread Jason Wong
On Wednesday 02 March 2005 22:03, Jason Barnett wrote: > Tom Z. Meinlschmidt wrote: > > which disables using url wrappers in > > include/include_once/require/require_once statemens (switchable in > > http://php.net/manual/en/ini.php#ini.list > > allow_url_fopen = 0 I haven't had a look at the pat

[PHP] Re: patch to php 4.3.10 to disabling URL wrappers in include like statements

2005-03-02 Thread Jason Barnett
Tom Z. Meinlschmidt wrote: > Hi, > > I've experienced a lot of attacks in my hosting server due to silly users and > their scripts with holes. So I prepared this little patch to 4.3.10, which > disables using url wrappers in include/include_once/require/require_once > statemens (switchable in php.