Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

PHP include URL issue

Discussion in 'General Discussion' started by brhospedagens, Jun 6, 2008.

  1. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    151
    For those who just got themselves a brand new server with CPanel, in my case with CentOS 5.0 OS.

    The easyapache compilation does not put:

    ; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
    allow_url_fopen = On
    allow_url_include = On

    inside php.ini, it is a security matter for sure but those ppl who still got includes like url inside their customers scripts, edit /usr/local/lib/php.ini and add the line above

    Hope this helps someone

    Regards
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. romulob

    romulob Active Member
    PartnerNOC

    Joined:
    Apr 29, 2008
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    56
    If you don't have mod_security with good rules, your server will run a lot of malicious perl scripts soon. Enabling allow_url_fopen and allow_url_include will open security holes.

    Good luck.
     
  3. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    151
    "inside php.ini, it is a security matter for sure but"
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice