[dev] turn off allow_url_include in core.php

Jan Schneider jan at horde.org
Sat Feb 14 10:01:49 UTC 2009


Zitat von duck <duck at obala.net>:

> On Saturday 14 February 2009 05:26:36 Chuck Hagenbuch wrote:
>> to the other ini settings in lib/core.php, as another security check?
>
> I agree. But we should implement curl in Horde_Http_Client and other parts
> where we read remote streams.

What does this have to do with allow_url_include?

Jan.

-- 
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/



More information about the dev mailing list