Php.ini for allow_url_include

allow_url_include is a really bad idea because it makes it easy to run untrusted code from the web by accident. If you are so desperate to shoot yourself in the foot with untrusted code, you can use file_get_contents to download the code and use eval to run it. But it’s still a bad idea.

2 Likes