php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Doc Bug #35618 Ini option "allow_url_include" was not included in 5.1.0
Submitted: 2005-12-10 05:04 UTC Modified: 2006-12-12 22:58 UTC
From: judas dot iscariote at gmail dot com Assigned: nlopess (profile)
Status: Closed Package: Documentation problem
PHP Version: Irrelevant OS: Irrelevant
Private report: No CVE-ID: None
 [2005-12-10 05:04 UTC] judas dot iscariote at gmail dot com
Description:
------------
allow_url_include is not working as expected ( manual says it's available since PHP 5.1.0)

Reproduce code:
---------------
allow_url_fopen = On
allow_url_include = Off

include('http://www.google.com');

Expected result:
----------------
should not include the url google.com

Actual result:
--------------
contents of google.com are included and displayed.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-12-10 05:51 UTC] judas dot iscariote at gmail dot com
changed to documentation problem.
I found no reference to the allow_url_include setting in the PHP 5.1.2-dev code.

but this page: http://www.php.net/manual/en/ini.php says:

"allow_url_include   "0"	PHP_INI_SYSTEM	Available since PHP 5.1.0."
 [2005-12-13 10:53 UTC] sniper@php.net
That option exists from PHP 6.0.0..
 [2005-12-26 18:02 UTC] nlopess@php.net
script fixed.
 [2006-11-28 12:34 UTC] colder@php.net
This setting is already used in 5.2.

http://cvs.php.net/viewvc.cgi/php-src/main/streams/streams.c?r1=1.82.2.6.2.1&r2=1.82.2.6.2.2&pathrev=PHP_5_2

Nuno, do you still want to take care of this one ? Assign it to me otherwise.

 [2006-12-12 20:08 UTC] joey@php.net
This option was added in PHP 5.2.0, and the documentation
has been changed to reflect that. It should show up in the
next push.
 [2006-12-12 22:58 UTC] judas dot iscariote at gmail dot com
Make sure to clearly mention that in 5.2.1 it affects php://input among other wrappers. ;)
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Wed Nov 19 20:00:01 2025 UTC