Re: filesystem security questions
| From: | Dan Allen | Date: | Wed, 12 Jun 2002 00:39:24 +0000 |
| Subject: | Re: filesystem security questions | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-85153@lists.php.net to get a copy of this message | ||
I personally thing there are FAR more important things to work on in
this extension before we even address this issue. For instance:
- relative xpath queries #1!!
- namespace support in xpath (meaning auto register from the xml
context)
- fixing get_element_by_id
to just name a few.
Dan
Rob Richards (rrichards@digarc.com) wrote:
> The more I think about it, I dont know if streams should be done in the
> domxml extension currently.
> This is a big change from its current implementation and if it was to be
> undertaken, then why not just start fresh with the unified implementation?
> You are talking about implementing everything as streams (the dom, nodes,
> etc..) correct?
>
> Even with stream, how would this help in the following problem. You need to
> save your document to file. You may be passing it in as a stream, but when
> the libxml call is made it just requires a file path. validation on the file
> path is still going to be needed.
> I cant see using a stream for this as we are not doing any type of I/O here,
> just calling another library with a file path.
>
> I might be missing with streams, but after reading the readme, i still dont
> see how they will help in this situation.
>
> I feel like I got side tracked from my origional question and am back at
> square one.
>
> Rob
>
>
> > Are you talking about your own extension or ext/domxml ? I
> > think (but could be wrong) that sooner or later streams
> > should be used everyone for consistency.
> >
> > - Markus
>
>
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, visit: http://www.php.net/unsub.php
--
________________________________________________________________
Daniel Allen, <dan@mojavelinux.com>
http://www.mojavelinux.com/
________________________________________________________________
Microsofts's Law of Software Engineering:
Don't worry if it doesn't work right.
If everything did, we'd be out of a job.
________________________________________________________________