Posted by Rik on 05/29/06 14:22

r.knipscheer@home.nl wrote:
> Hi,
>
> i've written a function to check if an image on a server exists:
> i send the url to check to the function and check it with:
>
> $file = @file ($url);
> if ($file) {
>
> this works ok, as long as i use it on my computer. As soon as i upload
> it to my webserver this function won't work. Is this a known security
> issue?

Is a security issue:

www.php.net:
Tip: You can use a URL as a filename with this function if the fopen
wrappers have been enabled. See fopen() for more details on how to specify
the filename and Appendix M for a list of supported URL protocols.

phpinfo()
check allow_url_fopen

Grtz,
--
Rik Wasmus

[Back to original message]