Re: XML Security?

On 10/30/03 9:12 AM, Alexandru COSTIN wrote:

compiled the right way (with the right extensions) from the beginning.

Sure... but why should we also require libxsl? We have enough dependencies already. We also had these discussions before, please stop here. Also, hwo many people are really using XSL anyway for their normal virtual hosted websites?

    The reason people don't use XSL for their shared servers is that  they CAN'T. Same applies for (DOM)XML (or PostgreSQL).
    I will stop the thread here, but you should understand that most PHP programmers are not C gurus like you guys are - and most of them does not know what "./configure" is. We have lots of clients (thousands) - PHP programmers - and they have real difficulties changing the php.ini settings, and probably it's a clear fact that PHP is mostly used by entry level programmers.

    Thinking like "they will recompile the PHP by themselves" is surely refreshing for the PHP5 build process, but it's not OK for us as this means that PHP5 will not be an XML ready platform by default.
    Looking at the php.general group, you will probably see that people are asking more and more for XML

I don't know, how SuSE/RedHat handles the issue, but on debian, it's a matter of apt-get install php4-domxml to get domxml support in php4 (if you took php4 also from apt-get and didn't compile it, but if you did compile it by yourself, you're anyway on another level) The same goes for Windows. Editing one line in php.ini shouldn't be a big deal, as all the needed libraries come with the windows download. You'd better talk to the distributors to include xsl/xml support, than to us. And about shared hosts: Either they just forgot it and will add it, if enough people ask for it, or they have a policy not to add too much xml support (memory issues for example). So the latter would just disable it again ;) Anyway, ext/xsl will certainly not be enabled by default in the future and I'll stop here as well with this discussion. chregu

            Alexandru

regards, Derick

-- christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich phone +41 1 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71 http://www.bitflux.ch | chregu@bitflux.ch | gnupg-keyid 0x5CE1DECB