Unknown W. Brackets writes: > Why not simply disable allow_url_fopen on your server or servers?
Why don't people do that? Obviously ... they don't. If you have no other answer than "Maybe they don't care about security, maybe they're stupid, maybe they're native", then may I suggest that the problem is intrinsic to 'include'? -- --My blog is at blog.russnelson.com | If you want to find Crynwr sells support for free software | PGPok | injustice in economic 521 Pleasant Valley Rd. | +1 315-323-1241 | affairs, look for the Potsdam, NY 13676-3213 | | hand of a legislator. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php