Re: HALT Patch
| From: | Daniel Convissor | Date: | Fri, 11 Mar 2005 21:37:10 +0000 |
| Subject: | Re: HALT Patch | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-15381@lists.php.net to get a copy of this message | ||
Hi Ilia:
On Fri, Mar 11, 2005 at 04:27:53PM -0500, Ilia Alshanetsky wrote:
> The data will not be parsed or output. When you need it you would make
> the script open itself and read the (binary) data dump from the end of
> the file and use it various creative ways.
Interesting. I'm wondering about the security implications of this.
This makes it very easy to use PHP as a means to propogate all sorts of
nasty things. Well, people could even do that today in one script by
setting a variable to a base64 encoded string then decoding it. None the
less, putting binary data in PHP scripts gives me pause.
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409