summaryrefslogtreecommitdiff
path: root/php.ini-recommended
diff options
context:
space:
mode:
authorRasmus Lerdorf <rasmus@php.net>2005-11-18 16:20:43 +0000
committerRasmus Lerdorf <rasmus@php.net>2005-11-18 16:20:43 +0000
commite1f1857978f90741bf4a381f5ddc90e3b0c3df68 (patch)
tree1f562185cc36d529d24e8c6ea746f3be9afb0e58 /php.ini-recommended
parentffa0e13a596b113c9bb7847e0ebd933e0e0e37db (diff)
downloadphp-git-e1f1857978f90741bf4a381f5ddc90e3b0c3df68.tar.gz
Add allow_url_include to let people turn on allow_url_fopen without also
enabling remote code execution through url wrappers
Diffstat (limited to 'php.ini-recommended')
-rw-r--r--php.ini-recommended2
1 files changed, 2 insertions, 0 deletions
diff --git a/php.ini-recommended b/php.ini-recommended
index 0bb77ab9ff..ba1ce7f38e 100644
--- a/php.ini-recommended
+++ b/php.ini-recommended
@@ -586,6 +586,8 @@ upload_max_filesize = 2M
; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
allow_url_fopen = On
+; Whether to allow code execution through URL wrappers
+allow_url_include = Off
; Define the anonymous ftp password (your email address)
;from="john@doe.com"