TIP: How to get arround allow_url_fopen=Off

[DJMaze]

PHP has a INI setting called allow_url_fopen, and when that is set to Off you're not able to use http & ftp streams with include or fopen().

Don't worry because as of PHP 4.3.2 there are new functions to create your own stream wrappers like stream_wrapper_register and stream_wrapper_unregister

Thanks to the new features we can get around it on hosts that disallow url_fopen for security reasons
To achieve this we need to write our own stream wrapper that uses fsockopen

My http stream wrapper can be found here http://cvs.moocms.com/moo/moo_core/l...eam/http.php?v

and here's how to use it

PHP Code:

if (!ini_get('allow_url_fopen'))
{
    include('moo_core/libraries/stream/http.php');
    stream_wrapper_unregister('http');
    stream_wrapper_register('http', 'lib_stream_http');
} 


Warning: by doing this you are re-opening the implemented security risks. therefore you should be very carefull with include() and require() functionality.
Therefore it's advisable NOT to use stream_wrapper_register if you're a PHP newbie and just use

PHP Code:

$fp = new lib_stream_http; 


[DJMaze]

Note: my stream wrapper is moved to http://cvs.moocms.com/moo/moo_core/l...ers/http.php?v

Second note: As of PHP 6 it save to use the above mentioned hack because it has a new ini directive called allow_url_include :p

[sde]

great to know. thanks for posting the info DJM.

[expx]

hey, I have never really actually programmed php, but I have a phpBB forum, and I have a MOD for my forum which needs to use the fsockopen function. However my host does not allow me to use this function. So this wrapper looks great but I am not sure exactly how to use it.

The script which tries to use the fsockopen function is in my /phpBB2 directory, so do I just put this wrapper into that directory as 'wrapper.php' or something?

and then the part in my script which uses the function is:

$fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);

so how can I use the wrapper to do the same thing? Any advice would be great, thank you.

[expx]

uhh ignore the post above, i realised that this isn't for getting round fsockopen :[

[DJMaze]

Originally Posted by expx

I have a MOD for my forum which needs to use the fsockopen function. However my host does not allow me to use this function.

Probably your webhost is either:
A. an asshole
B. free

In the cases you should either:
A. move to a good host
B. raise some money

Why?
A. the scary person doesn't understand the purpose of a good server hosting and just locked down everything
B. free host = free bandwidth = limited therefore it's locked down to prevent resource abuse

[expx]

Originally Posted by DJMaze

Probably your webhost is either:
A. an asshole
B. free

In the cases you should either:
A. move to a good host
B. raise some money

Why?
A. the scary person doesn't understand the purpose of a good server hosting and just locked down everything
B. free host = free bandwidth = limited therefore it's locked down to prevent resource abuse

I paid for this host, and they are so SH!T! hostultra.com is their address, and I bought my domain with them too, and I can't move to a better host because they don't allow me to take my registered domain with me. I read that loads of people had similar problems, I made a mistake signing up with them!

[sde]

can't you just get a new domain? if you don't own your domain, you're basically working for them and paying them for it. by the time you get sick of it and leave them, you will be leaving them with a domain that is worth at least something since it has been up for a while.