Re: CVS Account Request
| From: | Sascha Schumann | Date: | Wed, 15 Nov 2000 21:20:02 +0000 |
| Subject: | Re: CVS Account Request | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-38192@lists.php.net to get a copy of this message | ||
On Wed, 15 Nov 2000, Zeev Suraski wrote:
> At 23:08 15/11/2000, Sterling Hughes wrote:
>
> >Also I think we should be a little more careful of who we give cvs access
> >to on the code root. Right now I could probably get a fake e-mail and
> >such from yahoo and obtain a nice ol' cvs account, from which I could then
> >(if I was bad) commit some harmful code, which since it would not be a
> >part of standard/ or main/ would not be given due attention (especially if
> >it was a nice harmful one line bit) and then hurt users who use it.
>
> I can't tell you how I'm happy I am you say that. I was beginning to think
> I was being paranoid, but I think that considering the popularity of PHP,
> someone joining the dev team as a silent 'trojan horse' isn't unlikely at all.
We have a source code versioning system for exactly that
reason.
A single person cannot screw up our CVS tree. If he does
something extraordinarily stupid, pull his CVS account and
revert his changes.
- Sascha