Re: cvs: php4(PHP_4_0_7) /main SAPI.c
| From: | Rasmus Lerdorf | Date: | Sun, 21 Oct 2001 04:35:14 +0000 |
| Subject: | Re: cvs: php4(PHP_4_0_7) /main SAPI.c | ||
| References: | 1 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-7889@lists.php.net to get a copy of this message | ||
> Are you sure this is rock solid? It looks like plenty of room for nice
> crashes in the release :I
Yeah, I know it looks nasty, but I did test it pretty well. And the scope
is pretty limited. Only affects HHTP auth under safe mode. That combined
with the phpinfo() fix makes it possible to actually use http auth under
safe mode in a secure fashion. It was wide open before to the point where
I would advise people running a server in safe mode to disable http auth
completely (assuming they could figure out how to do that).
We are also still a few release candidates away from a release judging by
the number of failed regression tests right now.
-Rasmus