The PHP parameter allow_url_fopen has been disabled in PHP across our web hosting services as a security measure.

When enabled, allow_url_fopen allows PHP's file functions to retrieve data from remote locations such as an FTP server or website which can lead to code injection vulnerabilities. Typically these code injection vulnerabilities occur from improper input filtering when passing user-provided data to PHP functions. Disabling this function helps considerably in stopping your site from being compromised, as well as help prevent the unauthorised use of our servers for abusive or malicious purposes.


Was this answer helpful?

Related Articles

We have a security measure in place in PHP on all servers called "open_basedir". This is where PHP scripts are restricted with regard to what parts...
Yes we allow you to run FromMail type scripts, we strongly recommend that you use the nmsFormMail script for your "form to email" script rather...
The path to Perl on our servers is: /usr/bin/perl
The path to Sendmail on our servers is: /usr/sbin/sendmail
SSI (Server Side Include) tags allow you to include dynamic content in standard HTML pages. All of our servers support the use of SSI on pages with...