Skip to content
This repository has been archived by the owner on Oct 20, 2021. It is now read-only.

allow_url_fopen setting does not work with code #17

Closed
insperedia opened this issue Mar 7, 2017 · 3 comments
Closed

allow_url_fopen setting does not work with code #17

insperedia opened this issue Mar 7, 2017 · 3 comments

Comments

@insperedia
Copy link

insperedia commented Mar 7, 2017

Hi,

using http wrapper in streams considered as potential security risk. On our server we use allow_url_fopen=0 to block possibility to use url instead filenames. The recomended method to make remote requests in PHP is to use curl directly.
Anyway there would be no problem to override Api::httpRequest if it would have protected access modifier.

@Nyholm
Copy link

Nyholm commented Mar 7, 2017

The PR #16 will solve this issue.

@insperedia
Copy link
Author

Hi @Nyholm, nice to see meet you not only on PHP MeetUps but also on GitHub :)

@insperedia insperedia reopened this Mar 7, 2017
@insperedia
Copy link
Author

insperedia commented Mar 7, 2017

Regarding HTTPlug I would agree with developer. There no need in additional depencies.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants