File_get_contents: prevents man-in-the-middle attacks

File_get_contents: prevents man-in-the-middle attacks

SSL/TLS protection is disabled for all PHP versions earlier than 5.6 by default, but most other default options are insecure.

This results in insecure use of file_get_contents () to retrieve HTTPS resources. For example, a PHAR file or an API request.

Without SSL/TLS protection, all such requests are vulnerable to man-in-the-middle attacks. Hackers can inject false responses, such as custom php files or json responses.

You can use this function as an immediate alternative to file_get_contents () in any code in the HTTP request: https://github.com/bearinchina/file_get_contents