Atomicorp

It tests for it hourly, so perhaps some other application is changing it back?

That would definitely happen if you were using an application that was also managing your PHP settings.

as i'm using centos 6 64bit with whm cpanel installed so i checked the php.ini file from /usr/local/lib/php.ini

but fopen and url include is set off in the file but ASL is still shows warnings is it possible that php settings can be managed other than this main php.ini file?

can you provide some instruction or help on how to check if other application is using php settings?

i have checked phpinfo on my website and it also shows fopen off

so why ASL is showing this warning?

its really strange how do know and check if my php settings are really being hacked?

can you tell me how can i find which applications are modifying php settings?

the checks are looking at the settings in the php.ini file, it looks at /etc/php.ini and /usr/local/lib/php.ini