PDA

View Full Version : allow_url_fopen question


illco
03-21-2005, 10:13 AM
Hi,

my hosting provider sent me this email concerning a security issue in some PHP code, i'm not really a coder, so is there anybody who can tell me if the pixelpost scripts make use of the allow_url_fopen code ?!
This is an exerpt from the email sent by my hosting provider:

The security issue for
our servers is still severe and we will still be turning off the allow_url_fopen option soon, but
anyone who is currently relying on it will have some time to make the necessary code changes.
This will be your only announcement regarding this and you must make any necessary code
changes before the deadline.

Thx in Advance,
eelco

Connie
03-21-2005, 12:03 PM
eelco,

well, this options stops the including or opening of files at other webservers, URLs. By that if it is TRUE, there is the danger of intrusion of malicious code
that's why provider change this option

We do not open files from other URLs in PixelPost, we do include files only from the same server, not from other URLs

so you should be on the safe side!

illco
03-21-2005, 02:07 PM
Hi Connie,

thx alot, im glad i don't have to re code the pixelpost scripts!

greetings,
eelco