Skip to:
Content
Pages
Categories
Search
Top
Bottom

Re: Plugin: Plugin browser for bbPress


_ck_
Participant

@_ck_

Would it be possible for you to properly use fsockopen or curl instead of “file()” for remote files? Like many hosts, I disable file() for remote urls for security vulnerability reasons which cripples your plugin. You’re likely to get many complaints that “nothing happens”

Warning: file() [function.file]: URL file-access is disabled in the server configuration in /home/example/public_html/forums/bb-admin/admin-functions.php on line 798

.

update: actually this is not directly your fault, though you are trying to use a bb-admin function that was meant for local file access to do remote file access?

If I am not mistaken, you just found a bbpress security loophole.

ps. any concerns about eventually 2,000-20,000 bbpress users hammering the svn with so many file downloads to examine all the plugin headers?

Skip to toolbar