Req #54564 [Opn]: extension_dir should be used for loading zend_extensions

Edit report at https://bugs.php.net/bug.php?id=54564&edit=1 ID: 54564 Updated by: stas@php.net Reported by: tyra3l at gmail dot com Summary: extension_dir should be used for loading zend_extensions Status: Open Type: Feature/Change Request Package: Scripting Engine problem PHP Version: 5.3.6 Block user comment: N Private report: N New Comment: I think loading extensions through relative path opens a way to all kinds of dangerous behavior and may have problematic security implications - like ones described here: http://arstechnica.com/information-technology/2010/08/new- windows-dll-security-flaw-everything-old-is-new-again/. I'm not sure also why it is necessary - why can't PHP extension be installed in extension dir and run from there? If one needs multiple ones, multiple php.ini files can always be used. Previous Comments: ------------------------------------------------------------------------ [2011-04-18 23:05:25] tyra3l at gmail dot com Description: ------------ I've brought this topic on the internals http://marc.info/?l=php-internals&m=130314285822279&w=2 and I think that it would be useful and more consistent, if this could be changed, so one could easily load both "normal" and zend extensions without the need to use absolute paths. Test script: --------------- php -n -d zend_extension=xdebug.so -r '' Actual result: -------------- Failed loading xdebug.so: xdebug.so: cannot open shared object file: No such file or directory ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=54564&edit=1