Re: ini_set() security question

*I* agree, but my agreement don't mean much... :-v On Fri, June 1, 2007 10:13 am, Samuel Vogel wrote: > I just tried it with php 5.2.3. Same behavior! > > Do you agree that overwriting the value shouldn't be possible with > ini_set() ? > > I will file a bug report! > > Richard Lynch schrieb: >> File a bug report then, and see what happens... >> >> But you may want to test with most recent versions if you are not >> already on current PHP versions. >> >> On Thu, May 31, 2007 2:46 pm, Samuel Vogel wrote: >> >>> There is no bug filed for this. There is only one older bug ( >>> http://bugs.php.net/bug.php?id=38804 ) which makes me >>> think >>> overwriting >>> with ini_set() shouldn't be possible! >>> >>> Richard Lynch schrieb: >>> >>>> On Wed, May 30, 2007 3:34 pm, Samuel Vogel wrote: >>>> >>>> >>>>>> And what happens if you try to allocate 3M of data? >>>>>> >>>>>> $foo = str_repeat('.', 3145728); >>>>>> >>>>>> >>>>>> >>>>> Nothing. It does it without any errors. I can allocate up to 20MB >>>>> (well >>>>> a little bit less of course). >>>>> >>>>> >>>> Check http://bugs.php.net and see if it's a >>>> known issue or an >>>> exception to the php_admin_* rule or... >>>> >>>> >>>> >> >> >> > -- Some people have a "gift" link here. Know what I want? I want you to buy a CD from some indie artist. http://cdbaby.com/browse/from/lynch Yeah, I get a buck. So?