allow_url_fopen?
Code:
Warning: file_get_contents() [function.file-get-contents]: http:// wrapper is disabled in the server configuration by allow_url_fopen=0 in /####/###/.../includes/theme-functions.php on line 1260
Warning: file_get_contents(http://maps.google.com/maps/geo?q=usa&output=json&language=en&sensor=false&hl=en&region=US) [function.file-get-contents]: failed to open stream: no suitable wrapper could be found in /####/.../includes/theme-functions.php on line 1260
While I am getting this warning, and the solution is essentially turning on allow_url_fopen, I have this reservation:
If enabled, allow_url_fopen allows PHP's file functions to retrieve data from remote locations such as an FTP server or web site, and could lead to code injection vulnerabilities. Typically, these code injection vulnerabilities occur from improper input filtering when passing user-provided data to PHP functions. Disabling this function will help considerably in stopping your site(s) from being compromised, as well as help thwart the unauthorized use of our servers for abusive or malicious purposes.
So, my question is, is it SAFE to turn it on? And is there another solution around this since this[turning it on] may not be a very reliable solution?