libxml Functions
PHP Manual

libxml_disable_entity_loader

Disable the ability to load external entities

Warning

This function has been DEPRECATED as of PHP 8.0.0. Relying on this function is highly discouraged.

Description

bool libxml_disable_entity_loader(bool $disable = true)

Disable/enable the ability to load external entities. Note that disabling the loading of external entities may cause general issues with loading XML documents.

As of libxml 2.9.0 entity substitution is disabled by default, so there is no need to disable the loading of external entities, unless there is the need to resolve internal entity references with LIBXML_NOENT, LIBXML_DTDVALID, or LIBXML_DTDLOAD. Generally, it is preferable to use libxml_set_external_entity_loader to suppress loading of external entities. The LIBXML_NO_XXE constant can be used to prevent this as well (only available in Libxml >= 2.13.0, as of PHP 8.4.0).

Parameters

disable

Disable (true) or enable (false) libxml extensions (such as DOM, XMLWriter and XMLReader) to load external entities.

Return Values

Returns the previous value.

See Also

  • libxml_use_internal_errors
  • libxml_set_external_entity_loader
  • The LIBXML_NOENT constant
  • The LIBXML_DTDVALID constant
  • The LIBXML_NO_XXE constant