Page 1 of 1
version upgrade
Posted: Tue Mar 30, 2010 2:27 pm
by dimxasnewfrozen
I just upgraded to a newer version of php (5.2 i believe). I am noticing an issue with my includes now. The error is with: allow_url_include=0.
This is the default setting I'm assuming but I'm wondering how important is this and if it would wise to disable it or set it to 1. Just looking for recommendations really.
Re: version upgrade
Posted: Tue Mar 30, 2010 4:02 pm
by AbraCadaver
dimxasnewfrozen wrote:I just upgraded to a newer version of php (5.2 i believe). I am noticing an issue with my includes now. The error is with: allow_url_include=0.
This is the default setting I'm assuming but I'm wondering how important is this and if it would wise to disable it or set it to 1. Just looking for recommendations really.
My opinion is, if you need it turn it back on. The problem as with many things in PHP is that some coders use functions and pass non-sanitized data to them. This is probably more important to web hosting companies to keep their users from doing stupid things or installing software that does stupid things. If you properly sanitize data all should be well, unless your server is compromised, then you have bigger problems.
Re: version upgrade
Posted: Sat Apr 03, 2010 8:58 am
by kaisellgren
I'm curious, what for you need URL included files?