Re: HALT Patch

From: Date: Fri, 11 Mar 2005 22:14:40 +0000
Subject: Re: HALT Patch
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-15388@lists.php.net to get a copy of this message
On Fri, Mar 11, 2005 at 04:43:21PM -0500, Ilia Alshanetsky wrote: > Daniel Convissor wrote: > >Interesting. I'm wondering about the security implications of this. > >This makes it very easy to use PHP as a means to propogate all sorts of > >nasty things. > > You can already use PHP to propagate all sorts of nasty things, nothing > changes in this respect. > > >Well, people could even do that today in one script by > >setting a variable to a base64 encoded string then decoding it. > > Sure, BUT this approach makes the final file approximately %30 larger ... snip... No doubt. My second point was more to diminish my initial assertion, not to diminish the validity of your patch. Thanks, --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y data intensive web and database programming http://www.AnalysisAndSolutions.com/ 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409

« previous php.internals (#15388) next »