#35806 [Opn->WFx]: Enable/Disable debug functions from accessing protected/private elements

From: Date: Mon, 26 Dec 2005 20:19:56 +0000
Subject: #35806 [Opn->WFx]: Enable/Disable debug functions from accessing protected/private elements
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-91087@lists.php.net to get a copy of this message 
 ID:               35806
 Updated by:       derick@php.net
 Reported By:      mega-squall at caramail dot com
-Status:           Open
+Status:           Wont fix
 Bug Type:         Feature/Change Request
 Operating System: *
 PHP Version:      5.1.1
 New Comment:

Those debugging functions should not be used in production at all...
they are debugging features. And if they cause security problems you're
definitely doing something very wrong...


Previous Comments:
------------------------------------------------------------------------

[2005-12-26 15:40:25] mega-squall at caramail dot com

Description:
------------
Debug functions (print_r(), var_export()) may access protected/private
elements of objects for debugging puposes, but such a behavior might be
a security hole for some scripts on production status.

I suggest to add a configuration property which may enable or disable
such functions from acessing private/protected elements, for instance
in the php.ini ...



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=35806&edit=1

Thread (4 messages)

« previous php.bugs (#91087) next »