Curl and allow_url_fopen and joomla updates - Joomla! Forum - community, help and support

hi,
so have bunch of staged 2.5 sites on server while build them. had malware incident on site , host added (and more) php.ini file
allow_url_fopen = off

now when go extensions discover updates tells me need allow_url_fopen on. turned on , updates discoverable represents security risk.

it understanding extension manager first looks curl... , when in php settings curl enabled... why happening??

thanks

find different host, current 1 not secure , not understand security.

proper setup have this:
allow_url_fopen on
allow_url_include off

set php settings allow_url_fopen = "on"

make sure allow_url_include set "off" since 'open house' hackers. hosts not know turn off breaking many things result.

joomla needs allow_url_fopen 'on' make upgrade work. there discussion @ 1 point don't think @ time (if ever) extension manager fall or use curl. hosts turn off allow_url_fopen turn off curl.

no big deal can download patch, extract it, , upload ftp, selecting overwrite apply patch.

you can upload update package ftp , extract directly on server using domains file manager overwrite changed files automatically.