This is not a real feature request, but it does bug me a great deal. When you release new updates of ASL, can you please leave the PHP settings the way they were before? I know some may be insecure, but they sometimes have to be set that way and finding out after 15(!) days that Facebook auth no longer works for several of my sites, because ASL deemed it necessary to disable curl_exec() (among others), is not good.

Don't get me wrong, i do like version 3 very much and is a great improvement over the prior version, but it would be nice to not break something that was working before.

Or maybe set the default reporting for new checks like these to a higher alert level by default? Then you could much more easily locate the errors and what has changed. Then the server admin could manually lower the the alert level when everything is configured the way he wants.

Or maybe just leave the settings as they were, and when you first login at the admin panel after ASL gets updated, you see a message that ASL wants to change some PHP settings, and asks you to be okay with it. Not just change it on its own because in my case, ASL got updated automatically and when that happens, i don't see the changes right away.

Btw it seems it wasn't 15 days that curl_exec() was disabled, thank god. I just read topic http://www.atomicorp.com/forums/viewtopic.php?f=3&t=5228 which is from the 31st of july.

Anyway, to the ASL developers. Please do not touch the php.ini without asking first, because it is an integral part of webhosting and apps running on it.

+1

This has been a near constant source of pain the last few months. I get the security pluses for disabling fsockopen and curl_exec, but if I get phone calls from hosted site owners after every ASL update, some of which happen without my active involvement, that's a bummer.