View Single Post
Old June 27th, 2008, 11:36 PM   #4 (permalink)
patrickb
the one who was
Super #1
 
patrickb's Avatar
 
Joined in Jul 2003
Lives in Memphis
1,967 posts
Gave thanks: 0
Thanked 3 times
Gmax hit it on the money, those two settings are usually always cut off server wide and you will not be able to enable them because they are HUGE security risks. Very easy for someone to do whatever they want on your website if you have them on, mainly allow_url_fopen. I can't stress enough how bad it is to think about cutting those on.

Take a look at the link for cURL that gmax posted. That should do what ya need there.

Also the foreach loop you use to gather the variables is just as dangerous. It is much better to get the specific variables you need in each php script when you need them, rather than take every variable available in the environment at execution. Check out PHP: Using Register Globals - Manual for an explanation of how it can be exploited and why that method you are using now isn't a good idea.
__________________
Patrick

Warnings: The program(s) might crash unexpectedly or behave otherwise strangely. (But of course, so do many commercial programs on Windows.) --www.gimp.org
patrickb is offline   Reply With Quote