is using CURL to send and recieve information on a wp theme safe?

Solution:

A few things you should keep in mind:

  • Make sure the request within the script calling cUrl with certain arguments stops or it’s blocked by the server (let’s say, for 1hr) if the identification fails for 5 consecutive times.
  • Make sure your cUrl script contains also proxy variables like ip, username and password. There a lot of configurations out there requiring these.
  • Create a md5sum file for each downloaded script and save it on your disk. Compare the md5sum from the file on disk with the one newly created. Make sure the next user asking for the same file will download the already created one and not create a new one, since it won’t load the server.
  • Try to secure your php script on the server with 2 distinct identification (like username/password works). This will make less easy for evil ppl to find a path into your server.

I’m sure there are a lot of other stuff, but that’s all what’s in my mind now.