cvs: phpdoc /en/language/oop5 autoload.xml

vrana Wed Nov 21 15:39:18 2007 UTC Modified files: /phpdoc/en/language/oop5 autoload.xml Log: Dangerous characters in class name (bug #42744) http://cvs.php.net/viewvc.cgi/phpdoc/en/language/oop5/autoload.xml?r1=1.8&r2=1.9&diff_format=u Index: phpdoc/en/language/oop5/autoload.xml diff -u phpdoc/en/language/oop5/autoload.xml:1.8 phpdoc/en/language/oop5/autoload.xml:1.9 --- phpdoc/en/language/oop5/autoload.xml:1.8 Wed Jun 20 22:24:13 2007 +++ phpdoc/en/language/oop5/autoload.xml Wed Nov 21 15:39:18 2007 @@ -1,5 +1,5 @@ <?xml version="1.0" encoding="iso-8859-1"?> -<!-- $Revision: 1.8 $ --> +<!-- $Revision: 1.9 $ --> <sect1 xml:id="language.oop5.autoload" xmlns="http://docbook.org/ns/docbook"> <title>Autoloading Objects</title> <para> @@ -28,6 +28,14 @@ <link linkend="features.commandline">interactive mode</link>. </para> </note> + <note> + <para> + If the class name is used e.g. in <function>call_user_func</function> then + it can contain some dangerous characters such as <literal>../</literal>. + It is recommended to not use the user-input in such functions or at least + verify the input in <function>__autoload</function>. + </para> + </note> <para> <example> <title>Autoload example</title>