Out of my own research i noticed that it's very common that if a website sends a GET request to a external site using fopen() or curl_init() that the developers didn't think through that it can be targeted to his own internal network.
So i written a patch against this critical leak to prevent any hacker from getting access to the internal network using the webserver as proxy.