Re: A note about PHP and path disclosure errors

From: Brian Poole (raj@cerias.purdue.edu)
Date: 03/28/02


Date: Thu, 28 Mar 2002 15:23:00 -0500
From: Brian Poole <raj@cerias.purdue.edu>
To: vuln-dev@securityfocus.com

Quoting rain forest puppy (rfp@wiretrip.net) from 26 March 2002:
>
> register_globals and disabling furl_open_wrapper too.

I am guessing you mean to say allow_url_fopen here? I see nothing
about furl_open_wrapper anywhere.

; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
allow_url_fopen = Off

-b