Re: Add FILTER_VALIDATE_INCLUDE validation filter for variable includes
| From: | Andrey Andreev | Date: | Fri, 28 Sep 2018 12:49:29 +0000 |
| Subject: | Re: Add FILTER_VALIDATE_INCLUDE validation filter for variable includes | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-103274@lists.php.net to get a copy of this message | ||
Hi,
On Mon, Sep 24, 2018 at 2:21 PM, Arnold Daniels
<arnold.adaniels.nl@gmail.com> wrote:
>
>
> Please have a look at
> * https://wiki.php.net/rfc/script_only_include - PHP RFC:
> Introduce script
> only include/require
> * https://wiki.php.net/rfc/allow_url_include - PHP RFC: Precise
> URL include
> control
>
> Both describe the problem and possible solutions.
>
> Also see
> Êõ™*㌈&8ˆl
> f`https://www.exploit-db.com/search/?action=search&q=file+inclusion&platform=31
>
> Using the filter extension is an alternative solution, which doesn't require
> changing the PHP syntax.
>
That's really not the clear example I was looking for. But that's ok
... I believe I've made my point already.
Hopefully your emails are getting through to the list and others can
get involved.
Cheers,
Andrey.