allow_url_fopen shows on in phpinfo but off in php.ini

[dutchbb]

allow_url_fopen is disabled on my server but still showing as on in phpinfo. Both local and master value (php 7.1)

 

[Chris D]

Did you mean to post this as a bug?

phpinfo is served by PHP itself, so whatever shows there is generally what is running but either way it's nothing to do with XF.

 

[dutchbb]

Was not sure of this had something to do with XenForo, but thought so that it is a php issue.

I can set this on apache to off and in php.ini itself. Both are set to off, so strange it is showing as on.

 

[dutchbb]

Ok, found this. When php-fpm is enabled it will set allow_url_fopen on.

It will also disable these functions: exec,passthru,shell_exec,system

Info:
https://forums.cpanel.net/threads/php-fpm-default-settings.603183/
https://forums.cpanel.net/threads/enabling-php-fpm-in-multiphp-manager.581151/
https://features.cpanel.net/topic/php-fpm-enhanced-configuration