Re: [PHP-DEV] Making reading files from remote URL's more secure

2010-04-11 Thread Ferenc Kovacs
On Sun, Apr 11, 2010 at 6:23 PM, Keith Roberts wrote: > Hi all. > > I've been reading about the security implications of turning > allow_url_fopen 'on' for certain PHP applications that need to read files > from a remote URL. > > To recap, please read this old article about Remote file inclusion

Re: [PHP-DEV] Making reading files from remote URL's more secure

2010-04-11 Thread Ferenc Kovacs
On Sun, Apr 11, 2010 at 6:23 PM, Keith Roberts wrote: > Hi all. > > I've been reading about the security implications of turning > allow_url_fopen 'on' for certain PHP applications that need to read files > from a remote URL. > > To recap, please read this old article about Remote file inclusion

[PHP-DEV] Making reading files from remote URL's more secure

2010-04-11 Thread Keith Roberts
Hi all. I've been reading about the security implications of turning allow_url_fopen 'on' for certain PHP applications that need to read files from a remote URL. To recap, please read this old article about Remote file inclusion vulnerabilities: http://lwn.net/Articles/203904/ I'm just won