My host is not allowing this

Discussion in 'Programming' started by slymarketing, Apr 21, 2008.

  1. #1
    I bought a script a few days ago, and I tried to install it. Nothing worked, and I had to contact the creator. He told me that the reason it doesn't work is because my host is not allowing

    allow_url_fopen

    I am wondering if there is another way to get the script to work at my current host without using this function?

    This is the email I received from my host:

    The url_fopen feature can be used to compromise hosted accounts and even entire servers. As such, nearly all commercial hosting providers have "allow_url_fopen" disabled. File handling functions like fopen, file_get_contents, and include accept URLs as file parameters (for example: fopen('http://www.example.com/', 'r')). Even though this enables developers to access remote resources like HTTP URLs, it poses as a huge security risk if the filename is taken from user input without proper sanitization, and opens the door for remote code execution on the server.

    General recommendation:

    -------------
    The best way to bring in live data from another http source is to use curl rather than fopen. If you do a google.com search using terms such as:

    allow_url_fopen off

    or

    allow_url_fopen off curl​

    As you probably understand by now, I don't have a clue what he is talking about :)

    Thanks

    Jens
     
    slymarketing, Apr 21, 2008 IP
  2. it career

    it career Notable Member

    Messages:
    3,562
    Likes Received:
    155
    Best Answers:
    0
    Trophy Points:
    270
    #2
    it career, Apr 22, 2008 IP
  3. mabsj2

    mabsj2 Peon

    Messages:
    70
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    try Bravehost. they offer the best hosting services.
     
    mabsj2, Apr 22, 2008 IP