Hello,

one account of a user on our webserver was compromised using a feature of fopen to load external sources. As of the documentation, there shall be a configure option called "--disable-url-fopen-wrapper". Unfortunately, this option doesn't seem to exist in 4.3.9. How can I set a default for allow_url_fopen during the compilation? Or is the only way to set

allow_url_fopen=0

in the master php.ini?

Regards
Marten

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to