[Lynne]

Originally Posted by Dave-ahfb

Yes, it does have downfalls, I must either go live and do the work on the live pages without htaccess or find a way for the include to send the htpasswd (thinking it can be done but have not investigated yet). The biggest possible downfall is potential security issues having Allow_url_fopen and Allow_url_include = On. I have read there could be issues but have not read what these issues could be. Is it possible you could enlighten me to these issues and any others I may not be aware of?

thanks

You should probably post that sort of question out in the general forums. I'm really not a security expert (I know just enough for my little site!), but there are some server guys around who could probably answer your question.