Re: HALT Patch
| From: | Daniel Convissor | Date: | Fri, 11 Mar 2005 22:14:40 +0000 |
| Subject: | Re: HALT Patch | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-15388@lists.php.net to get a copy of this message | ||
On Fri, Mar 11, 2005 at 04:43:21PM -0500, Ilia Alshanetsky wrote:
> Daniel Convissor wrote:
> >Interesting. I'm wondering about the security implications of this.
> >This makes it very easy to use PHP as a means to propogate all sorts of
> >nasty things.
>
> You can already use PHP to propagate all sorts of nasty things, nothing
> changes in this respect.
>
> >Well, people could even do that today in one script by
> >setting a variable to a base64 encoded string then decoding it.
>
> Sure, BUT this approach makes the final file approximately %30 larger
... snip...
No doubt. My second point was more to diminish my initial assertion, not
to diminish the validity of your patch.
Thanks,
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409