Re: HALT Patch
| From: | Ilia Alshanetsky | Date: | Fri, 11 Mar 2005 21:43:21 +0000 |
| Subject: | Re: HALT Patch | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-15382@lists.php.net to get a copy of this message | ||
Daniel Convissor wrote:
Interesting. I'm wondering about the security implications of this. This makes it very easy to use PHP as a means to propogate all sorts of nasty things.You can already use PHP to propagate all sorts of nasty things, nothing changes in this respect.
Well, people could even do that today in one script by setting a variable to a base64 encoded string then decoding it.Sure, BUT this approach makes the final file approximately %30 larger and any time it is executed this "data dump" as I like to refer to it will be parsed and stored in memory. Which makes this approach highly inefficient. Ilia