sorry! its just silly me. i had .htaccess on the web root which was preventing it from working.
anyway, it has taught me that even if using fopen() within the authorised pages, you cant have it running if you have .htaccess restrictions... can it be a bug?