[php-maint] Bug#579922: Bug#579922: libapache2-mod-php5: change allow_url_fopen = Off

Raphael Geissert geissert at debian.org
Wed May 5 19:34:11 UTC 2010


tag 579922 wontfix
thanks

Hi,

On Sunday 02 May 2010 05:47:13 Toni Mueller wrote:
> I suggest that this be changed to
> 
> allow_url_fopen = Off
> 
> to reduce the change of PHP applications being exploited, and, if you
> really need to, place a big flashing warning around it to warn users
> from changing it to "On" again.
> 

No, there are fair use cases for using stream wrappers and making this change 
would break many applications. 

Feel free to take this upstream and make the change happen there.

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net





More information about the pkg-php-maint mailing list