Re: Security Issues
| From: | Björn Schotte | Date: | Fri, 27 Jul 2001 11:15:42 +0000 |
| Subject: | Re: Security Issues | ||
| References: | 1 2 3 4 5 6 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-61193@lists.php.net to get a copy of this message | ||
* Zeev Suraski wrote:
> equivalent to shipping cars without brakes. You hope that the user would
> be bright enough to install brakes,
Hoping that is not enough. If you really change the
behaviour to ship PHP with register_globals to off,
then I suggest you should also ship some README_Security
or something similar where Kris writes a nice tutorial
about writing secure PHP applications. (This README_Security
should also be inserted into the Manual and all places where
it makes sense) Also, before doing "make install" a
"less README_Security" should be done by the makefile.
--
PHP Schulungen und | International PHP Conference
Schulungsmaterial: | 05. - 07.11.2001
http://thinkphp.de/ | Astron Hotel,
Frankfurt
http://rent-a-phpwizard.de/schulungen.php |
http://www.php-kongress.de/