Re: Security Issues
| From: | Zeev Suraski | Date: | Fri, 27 Jul 2001 17:07:20 +0000 |
| Subject: | Re: Security Issues | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-61249@lists.php.net to get a copy of this message | ||
I'm definitely in favour of that, and some of the other suggestions that were raised. We won't be able to make all steps at once, but whomever can contribute is obviously quite welcome to do so.
Zeev
At 04:15 27/07/2001, Björn Schotte wrote:
* Zeev Suraski wrote: equivalent to shipping cars without brakes. You hope that the user would be bright enough to install brakes, Hoping that is not enough. If you really change the behaviour to ship PHP with register_globals to off, then I suggest you should also ship some README_Security or something similar where Kris writes a nice tutorial about writing secure PHP applications. (This README_Security should also be inserted into the Manual and all places where it makes sense) Also, before doing "make install" a "less README_Security" should be done by the makefile. ---- Zeev Suraski <zeev@zend.com> CTO & co-founder, Zend Technologies Ltd. http://www.zend.com/PHP Schulungen und | International PHP Conference Schulungsmaterial: | 05. - 07.11.2001 http://thinkphp.de/ | Astron Hotel, Frankfurthttp://rent-a-phpwizard.de/schulungen.php | http://www.php-kongress.de/ -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net For additional commands, e-mail: php-dev-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net