The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

PHP include URL issue

Discussion in 'General Discussion' started by brhospedagens, Jun 6, 2008.

  1. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    For those who just got themselves a brand new server with CPanel, in my case with CentOS 5.0 OS.

    The easyapache compilation does not put:

    ; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
    allow_url_fopen = On
    allow_url_include = On

    inside php.ini, it is a security matter for sure but those ppl who still got includes like url inside their customers scripts, edit /usr/local/lib/php.ini and add the line above

    Hope this helps someone

    Regards
     
  2. romulob

    romulob Active Member
    PartnerNOC

    Joined:
    Apr 29, 2008
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    If you don't have mod_security with good rules, your server will run a lot of malicious perl scripts soon. Enabling allow_url_fopen and allow_url_include will open security holes.

    Good luck.
     
  3. brhospedagens

    brhospedagens Member

    Joined:
    Mar 7, 2006
    Messages:
    16
    Likes Received:
    0
    Trophy Points:
    1
    "inside php.ini, it is a security matter for sure but"
     
Loading...

Share This Page