+1 @gws
https://docs.joomla.org/Security_Checkl ... _url_fopen
https://docs.joomla.org/Security_Checkl ... _url_fopen
Use allow_url_fopen
This option enables the URL-aware fopen wrappers that enable accessing URL object like files. Default wrappers are provided for the access of remote files using the FTP or HTTP protocol, some extensions such as zlib may register additional wrappers. Note: This can only be set in php.ini for security reasons. Enable and use allow_url_fopen to allow Joomla's One-Click-Update to work properly.
For more information see: PHP Manual: allow_url_fopen and allow_url_include
Proper setup will have this:
allow_url_fopen = 1
allow_url_include = 0
PHP default: allow_url_fopen is enabled
PHP default: allow_url_include is disabled
Statistics: Posted by Webdongle — Thu Aug 29, 2024 6:23 pm