
Originally Posted by
jabbawest
Well, a little searching found that this needs to be allowed in the php.ini file by adding the following.
allow_url_fopen = On;
allow_url_include = On;
More research suggests that doing this would allow a huge opening for DoS attacks and scripting injections both of which I'm quite familiar with from running php-nuke sites. Back then I was able to install a security module that would automatically ban anyone trying hack into my sites.
Any opinions about this, or maybe it should be a new topic in the security forum?
Thanks
Bookmarks