WordPress cannot switch allow_url_fopen from its dashboard. It is a PHP system-level directive that controls whether PHP can open HTTP and FTP URLs as stream files. Change it in the PHP configuration used by the site—typically WHM’s MultiPHP INI Editor, a PHP-FPM pool setting, or a host-managed php.ini—then verify the value in the same web runtime that runs WordPress.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
What allow_url_fopen controls
PHP’s allow_url_fopen directive enables URL-aware stream wrappers. When it is enabled, functions that accept a filename, such as fopen() and related filesystem functions, can work with registered HTTP or FTP URLs as well as local paths. PHP documents a default value of 1, which means enabled, although a host can override that value for a PHP version, domain, or process pool.
As an Amazon Associate I earn from qualifying purchases.
Free tools Windows power users keep installed
One-click scans. No signup required.
“This option enables the URL-aware fopen wrappers that enable accessing URL object like files.” — PHP Manual, Filesystem and Streams Configuration Options
When a script passes a network URL to fopen() while the directive is disabled, PHP emits a warning and the operation fails. A WordPress plugin may therefore report that remote requests are unavailable, fail to download an update, or be unable to read a remote feed. The setting affects PHP code running on the server; it is not a browser permission and it is not a WordPress feature switch.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
allow_url_include is separate. It controls URL-based include, include_once, require, and require_once operations. Enabling allow_url_fopen does not enable remote-file inclusion.
Why the WordPress dashboard has no setting
PHP classifies allow_url_fopen as an INI_SYSTEM directive. Its effective value normally comes from system PHP configuration or a PHP-FPM/host configuration layer, not from a portable WordPress option. A plugin can test the current value and display an error, but it cannot reliably change the server-wide directive from its settings page.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →The value can differ between command-line PHP and the web PHP process. Apache, FastCGI, LiteSpeed, and separate PHP-FPM pools may each load different configuration files or have different administrator-enforced values. Changing the value in one context does not prove that WordPress sees the same value.
Decide whether the site should enable it
cPanel notes that hosts often disable URL-aware wrappers for security reasons, while some scripts require them. The practical choice is a compatibility decision:
- Enable it when a trusted, maintained plugin or integration genuinely needs PHP stream wrappers to fetch HTTP or FTP resources and the host permits the change.
- Leave it disabled when no site feature requires it, particularly on a shared server where reducing available remote wrappers is part of the provider’s security policy.
- Do not confuse this setting with input validation. Turning the directive off does not repair unsafe plugin code, sanitize user-controlled URLs, or make an unmaintained application safe.
- Keep remote inclusion separately restricted. cPanel’s security guidance treats
allow_url_fopenandallow_url_includeas controls relevant to remote-file-inclusion risk; allowing one does not require allowing the other.
Before changing a production site, identify which plugin or integration needs the capability, confirm that it is current and trusted, and note the current value so you can roll back if another application breaks.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Enable or disable it in cPanel and WHM
The available control depends on your account privileges and the PHP handler serving the domain. The following routes are the cPanel-documented options.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →WHM MultiPHP INI Editor: change a PHP version globally
- Sign in to WHM with permission to manage PHP configuration.
- Open Home → Software → MultiPHP INI Editor.
- Select the PHP version used by the WordPress domain.
- Locate
allow_url_fopenand set it to Enabled or Disabled. - Save the configuration, then verify the value from the site’s web runtime.
This route changes the system configuration for accounts using that PHP version. It is broader than a single-domain change: other sites on the same version can inherit the new value. Confirm the scope before saving, especially on a server hosting unrelated applications.
PHP-FPM: change the domain’s pool behavior
When the domain uses PHP-FPM, WHM exposes a pool-level control:
- Open WHM → Home → Software → MultiPHP Manager.
- Open the domain’s PHP-FPM settings.
- Change Treat URLs as files (allow_url_fopen) to the required state.
- Apply the change and retest the WordPress feature.
cPanel also documents the pool directive form php_admin_flag[allow_url_fopen] = on for PHP-FPM configuration. A pool-level administrator flag can override a user-level attempt to change the value, so a value entered in a per-user file may appear to save while the web process continues to use the pool setting. Use the control supplied by the host for that pool rather than adding competing directives in several places.
suPHP or a domain-level system configuration
On a suPHP stack, cPanel describes using suPHP_ConfigPath and editing a system-recognized copy of php.ini with:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
allow_url_fopen = OnThe exact file location and activation method depend on the server’s configuration. A random php.ini placed in the document root is not guaranteed to be loaded. Ask the administrator which configuration path the domain uses, make the change there, and verify it through the web runtime.
LiteSpeed
LiteSpeed servers can apply PHP settings differently from Apache or PHP-FPM. Follow the host’s LiteSpeed-specific method for the relevant php.ini. cPanel warns that a value entered in a non-system user-ini file may be ignored on this stack. If the WordPress diagnostic still reports the old value after a change, the most likely causes are an unrecognized file, a higher-precedence administrator setting, or a different PHP handler serving the request.
When you have cPanel but not WHM
Standard cPanel accounts generally cannot change an INI_SYSTEM directive globally. If your account does not expose the setting, contact the hosting provider and state:
- the domain and WordPress site that need the change;
- the PHP version selected for that domain;
- whether the domain runs PHP-FPM, FastCGI, Apache, or LiteSpeed, if known;
- whether you need
allow_url_fopenenabled or disabled; and - the plugin or integration that requires the behavior.
Ask the provider to apply the change to the web PHP runtime, not only to command-line PHP, and to confirm the resulting scope. Hosts may refuse the change on shared plans because of their security policy.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesVerify what WordPress actually sees
Verification must happen in the same web process that serves WordPress. Checking only the output of a command-line php -i command can be misleading when the site uses a different PHP version, configuration file, or FPM pool.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
- Use the host’s MultiPHP INI Editor or PHP-FPM screen to confirm which PHP version and handler the domain is assigned.
- Create a temporary diagnostic file in a protected, non-public location or with access restricted to an administrator. A minimal example is:
<?php
phpinfo();- Open the diagnostic page through the domain’s normal HTTPS URL and find
allow_url_fopen. Review both the local and master values, along with the Server API, loaded configuration file, and PHP version. - Compare that result with the value shown in the host control panel. If they differ, the web handler, pool, or administrator policy is taking precedence.
- Delete the diagnostic file immediately after checking. A
phpinfo()page exposes environment details that should not remain publicly accessible. - Retest the plugin or integration that prompted the change and inspect PHP and web-server logs for warnings.
A successful change means the web runtime reports the intended value and the specific WordPress operation completes. Merely seeing a saved value in a panel is not sufficient proof.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to check when a plugin still says it is disabled
The domain is using another PHP version
WHM’s global editor applies its setting by PHP version. Confirm the domain’s assigned version in MultiPHP Manager and edit that version, not the version used by a different site or by the server’s command line.
The request is handled by a different pool
PHP-FPM can assign each domain, or groups of domains, to separate pools. A pool-level php_admin_flag can enforce a value regardless of a user-level file. Check the domain’s FPM settings and have the host confirm the pool configuration.
Recommended Free Tools
The edited file is not loaded
LiteSpeed, suPHP, FastCGI, and other handlers have different configuration paths. The loaded-configuration-file line in phpinfo() identifies which file the web process actually reads. If the path does not match the file you edited, move the change to the recognized administrator location or ask the host to do it.
CLI and web PHP disagree
Running a command-line check tests the CLI binary. WordPress normally runs through a web server and a web PHP handler. Treat the web diagnostic as authoritative for the site, and avoid changing the CLI configuration unless a separate command-line job also needs the directive.
The plugin needs a different capability
Some integrations use cURL, a WordPress HTTP transport, or another library instead of PHP’s URL-aware stream wrappers. Enabling allow_url_fopen will not fix a certificate error, DNS failure, outbound-firewall block, authentication problem, or plugin-specific configuration error. Read the plugin’s exact warning and inspect the logs before changing a system directive.
Configuration caching delays the result
After a PHP-FPM or server-level change, existing workers may need to reload. Use the host’s documented reload or restart procedure, then repeat the web-runtime check. Do not restart services on a managed server unless the provider authorizes it.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteChoosing among configuration routes
| Route | Typical scope | Runtime covered | Important limitation |
|---|---|---|---|
| WHM MultiPHP INI Editor | All accounts using one PHP version | The system configuration for that version | A broad change can affect unrelated sites. |
| WHM MultiPHP Manager PHP-FPM setting | One domain or FPM pool | The selected domain’s PHP-FPM workers | Pool administrator flags can override user files. |
suPHP with recognized php.ini |
Domain or stack-defined configuration path | suPHP requests using that path | A file in an unrecognized location has no effect. |
| LiteSpeed host method | Depends on the host’s LiteSpeed configuration | The LiteSpeed PHP handler | Non-system user-ini values may be ignored. |
| Hosting-provider change | Whatever scope the provider permits | The actual web runtime serving WordPress | Availability and scope vary by hosting plan and security policy. |
Prefer the narrowest scope that satisfies the application. A domain-level FPM setting limits collateral effects; a PHP-version-wide setting may be appropriate when several controlled sites have the same requirement.
Security and maintenance checklist
- Identify the exact plugin feature that needs remote HTTP or FTP streams.
- Confirm the plugin is maintained and that its remote URL inputs are validated.
- Enable the directive only in the PHP runtime that needs it.
- Keep
allow_url_includedisabled unless a separately justified, controlled requirement exists. - Verify the effective value through the web runtime after every configuration change.
- Remove temporary
phpinfo()diagnostics. - Monitor PHP and web-server logs for failed URL opens, timeouts, and warnings.
- Document the reason, PHP version, scope, and date of the change so it can be reversed during a plugin replacement or security review.
How to disable it safely
Disabling follows the same route as enabling: set the directive to Disabled in WHM’s MultiPHP INI Editor, turn off Treat URLs as files (allow_url_fopen) for the PHP-FPM domain or pool, or have the host remove the enabled system setting. Do not simply delete a line from an arbitrary user file and assume the value changed.
After disabling, verify the web runtime reports the new value, then exercise scheduled jobs, update checks, feed imports, image fetches, and any other feature known to contact remote resources. If a required feature fails, restore the previous value or move the feature to a supported transport after confirming the plugin’s documented requirements.
Quick Recap
Quick decision guide
- Plugin says “allow_url_fopen is disabled” and the feature is trusted: identify the domain’s PHP handler, enable the directive at the narrowest supported scope, verify through web PHP, and retest.
- You cannot find the control: you likely lack WHM privileges or the host has hidden an
INI_SYSTEMsetting; request a provider-side change. - The panel says enabled but the plugin disagrees: compare the domain’s web runtime, loaded
php.ini, PHP version, and FPM pool; do not rely on CLI output. - No application needs URL-aware streams: leave the directive disabled where your host supports that policy and keep remote inclusion restricted.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
