Re: HALT Patch
| From: | John Coggeshall | Date: | Fri, 11 Mar 2005 21:49:50 +0000 |
| Subject: | Re: HALT Patch | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-15384@lists.php.net to get a copy of this message | ||
On Fri, 2005-03-11 at 16:37, Daniel Convissor wrote:
> Interesting. I'm wondering about the security implications of this.
> This makes it very easy to use PHP as a means to propogate all sorts of
> nasty things. Well, people could even do that today in one script by
> setting a variable to a base64 encoded string then decoding it. None the
> less, putting binary data in PHP scripts gives me pause.
There is no issue here. You can throw binary data at the end of a PHP
script as it is now:
<?php
/* stuff */
exit;
?>
<binary data here>
-- the halt token only makes it so PHP doesn't waste time processing
something that doesn't need to be processed.
John