Quoting myself: > One other thing: You might also consider switching > /etc/php4/apache/php.ini's allow_url_fopen boolean to "Off". Likewise, file_uploads = Off . Interesting reading: http://www.hardened-php.net/documentation.php