Hi Arsalan,

Thanks for taking an interest in my post over on softwarerecs.stackexchange.com re allowurlfopen.

You said that this function is used to allow developers to retrieve files from across the internet, so from an external source? Is this in order to effectively protect users data outside the root directory, in the data folder, as suggested in your installation / setup documentation?

You also say that you do not see this as a security issue, which is great, but when I Google allowurlfopen there are many many results stating its vulnerability, and in some results even offering exploits to take advantage of, what appears to be a loop hole.

The first result in Google states:
PHP scripts that can access remote files are potentially vulnerable to arbitrary code injection. When the allowurlfopen directive is enabled, you can write scripts that open remote files as if they are local files. For example, you can use the filegetcontents function to retrieve the contents of a web page.

I do like this open source social network as the functionality follows that of Facebook, and being a Facebook group who I am looking to set this up for, this would provide the most seamless experience for my community. However, the security of my community is paramount and so would really like to be sure on the platform I eventually use.

As a side note, another important factor that I must consider is mobile access. Which is one of the reasons I was attracted to crea8socialPRO. Does your platform offer a mobile platform, or do the site pages render effectively across devices i.e. using HTML5 for example? I don't see mobile in the list of features, but I do see a mobile image in your slider(2) on the home page.

Thanks for all your help, and hope you can satisfy all my concerns.

Thanks
Rob