title: Require_once and fopen in php security
body: <p>I have 1 file that i've implemented in PHP. 
  Error that i get is </p>
  
  <p><strong>Warning: require_once(): http:// wrapper is disabled in the server configuration by allow_url_include=0 in /Applications/MAMP/htdocs/opencart/catalog/view/theme/default/template/payment/bank_transfer.tpl on line 13Warning:</strong> </p>
  
  <p>Questions: </p>
  
  <ol>
  <li><p>I know that i need to fix this by allowing allow_url_include=0, in php.ini.I'm using MAMP, i've searched all the folders in MAMP and MAMP Pro, but i didn't find any line, where i can set that value to 0. <strong>Do i add this line?</strong> </p></li>
  <li><p>I've read <a href="https://stackoverflow.com/questions/8034064/error-using-include-once-with-a-php-variable">LINK</a> and i'm worried that there are some security issues with using require_once, fopen and absolute URL. Is there any security issues with using absolute URL and require_once? </p></li>
  <li><p>How can i specify URL to the document? Currently it's <strong>www.example.com/opencart/admin/kzm/kzm.utils.php</strong>, i tried to use relative URL <strong>/opencart/admin/kzm/kzm.utils.php</strong>, but i didn't find the file. Am i doing it right? </p></li>
  </ol>
  
  <p>bank_transfer.tpl: </p>
  
  <pre><code>&lt;h2&gt;&lt;?php echo $text_instruction; ?&gt;&lt;/h2&gt;
      &lt;div class="content"&gt;
            &lt;p&gt;&lt;?php echo $text_description; ?&gt;&lt;/p&gt;
            &lt;p&gt;&lt;?php echo $bank; ?&gt;&lt;/p&gt;
            &lt;p&gt;&lt;?php echo $text_payment; ?&gt;&lt;/p&gt;
            &lt;p&gt;&lt;?php echo $orderIdKZM; ?&gt;&lt;/p&gt;
            &lt;p&gt;
            &lt;?php 
              echo $amountKZM; 
              $titleKZM = $titleKZM.$orderIdKZM; 
              echo '&lt;br&gt;';
  
              require_once('http://example.com/opencart/admin/kzm/kzm.utils.php');
              echo $titleKZM;
              echo '&lt;br&gt;';
  
              $merchantIdKZM = '10';
              $currencyKZM = 'KZT';
              $successUrlKZM = 'http://localhost:8888/opencart/admin/kzm/kzm_pay.php';
              $erroUrlKZM = 'http://www.google.com';
  
              $dateKZM = " ";
              $signstrKZM = " ";
              $verKZM = " ";
              echo $merchantIdKZM.'-'.$currencyKZM.'-'.$successUrlKZM.'-'.$erroUrlKZM.'-'.$dateKZM;
  
            ?&gt;&lt;/p&gt;
      &lt;/div&gt;
      &lt;div class="buttons"&gt;
        &lt;div class="right"&gt;
              &lt;form action="/opencart/testkzm.php" method="get"&gt;
                  &lt;input type="hidden" name="merchantIdKZM" value="&lt;?php echo $merchantIdKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="orderIdKZM" value="&lt;?php echo $orderIdKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="amountKZM" value="&lt;?php echo $amountKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="currencyKZM" value="&lt;?php echo $currencyKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="successUrlKZM" value="&lt;?php echo $successUrlKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="errorUrlKZM" value="&lt;?php echo $errorUrlKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="signstrKZM" value="&lt;?php echo $signstrKZM; ?&gt;"&gt;
                  &lt;input type="hidden" name="verKZM"  value="&lt;?php echo $verKZM; ?&gt;"&gt;
  
                  &lt;input type="submit" value="&lt;?php echo $button_confirm; ?&gt;" id="button-confirm" class="button" /&gt;
              &lt;/form&gt;
          &lt;/div&gt;
      &lt;/div&gt;
  </code></pre>