Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

PHP: allow_url_include

Tags:

security

php

Quick...possibly stupid question.

When allow_url_include is set to off, does that prohibit other computers from remotely including the files on my site, or does it say that I'm not allowed to remotely include files from other sites?

like image 462
Senica Gonzalez Avatar asked Apr 12 '11 10:04

Senica Gonzalez


People also ask

What is allow_url_include?

The PHP configuration directive allow_url_include is enabled. When enabled, this directive allows data retrieval from remote locations (web site or FTP server) for functions like fopen and file_get_contents. If user input is not properly validated, this can conduct to remote file inclusion vulnerabilities.

Where is my PHP ini file?

ini file is the default configuration file for running applications that require PHP. It is used to control variables such as upload sizes, file timeouts, and resource limits. This file is located on your server in the /public_html folder.

What is PHP default_ socket_ timeout?

default_socket_timeout int. Default timeout (in seconds) for socket based streams. Specifying a negative value means an infinite timeout.


1 Answers

Settings in your php.ini only affect your PHP installation

like image 193
Gareth Avatar answered Oct 12 '22 22:10

Gareth