<?php
// Put all the php.ini parameters you want to change below. One per line.
// Follow the example format $parm[] = "parameter = value";
$parm[] = "register_globals = Off";
$parm[] = "session.use_trans_sid = 0";
// full unix path - location of the default php.ini file at your host
// you can determine the location of the default file using phpinfo()
$defaultPath = '/usr/local/lib/php.ini';
// full unix path - location where you want your custom php.ini file
$customPath = "/home/user/public_html/php.ini";
// nothing should change below this line.
if (file_exists($defaultPath)) {
$contents = file_get_contents($defaultPath);
$contents .= "\n\n; USER MODIFIED PARAMETERS FOLLOW\n\n";
foreach ($parm as $value) $contents .= $value . " \n";
if (file_put_contents($customPath,$contents)) {
if (chmod($customPath,0600)) $message = "The php.ini file has been modified and copied";
else $message = "Processing error - php.ini chmod failed";
} else {
$message = "Processing error - php.ini write failed";
}
} else {
$message = "Processing error - php.ini file not found";
}
echo $message;
?>

INSTALLING A CUSTOM PHP.INI DIRECTIVE

1. Log in to cPanel
2. Click on Legacy File Manager, and have it open to your web root.
3. Click "Create a New File".
4. In the right hand frame, in the field, allow it to default to text document, and put "php.ini" in the field.
5. Find php.ini in the list of files in the left hand window pane.
6. Click on the word php.ini
7. In the right hand frame, click "Edit File with Code Editor"
8. Allow coding to default to iso-8859-1
9. It will launch a new tab or window that is numbered down the side. This is where you will place the values that you need to change.
10. Copy the attached php.ini into it, and edit what you need from there.
11. When you are done, click "Save Changes" at the top, and go back to file Manager.

'allow_url_fopen' : on Not secure
This setting allows attackers to execute arbitrary scripts on remote servers.
Only administrator can change this option.
If you are an admin, edit php.ini or httpd.conf.
Sample of httpd.conf:
php_admin_flag allow_url_fopen off
Else, claim it to your administrators.