PHP - RSS new feed security

r3a1's picture

He has: 28 posts

Joined: Aug 2005

:flame:

I'm having a problem with a site I have designed (in PHP) with an RSS News Feed. When the site was first created everything was working great. We made a couple of updates to the server and with the updates came the alteration to the php.ini file to disallow fopen. Major bummer for me because now my feed is worthless. I have talked to the webmaster and he isn't to keen on changing the flag as it is the "source of frequent exploit" which I'm sure it is. I was curious if anyone had any ideas around the problem. My only idea is to create a frame and pipe the feed into that, however I will lose the ability to stylize the page. Here are some links to help you visualized the problem.

RSS News Feed:
http://projects.cis.ksu.edu/plugin/rssfeed/?limit=4&show_summaries=true

The Site itself:
http://www.cis.ksu.edu/santos/

For your reference (fopen manual entry for php.net, I thought it might save some of you time):
http://us2.php.net/manual/en/function.fopen.php

Thanks in advance!

Ryan

Mark Hensler's picture

He has: 4,048 posts

Joined: Aug 2000

You just need to read the contents of that file, correct?

Can you read the contents of the file locally (system path), or need it be via URL?

They have: 14 posts

Joined: Oct 2005

If fsockopen() is allowed, you can do the same as fopen, just takes a few extra lines...

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.