Re: Re: Expose php: on or off

From: Date: Thu, 10 Nov 2005 23:35:02 +0000
Subject: Re: Re: Expose php: on or off
References: 1 2 3 4  Groups: php.internals 
Request: Send a blank email to internals+get-19960@lists.php.net to get a copy of this message
Marcus Boerger wrote:
agreed, also we are doing very much work on security. Thus new and regular updated systems shouldn#t have a problem with exposing this. And we cannot do anything for unmaintained systems anyway. Therefore i think we or any user should not be ashamed or fear having php being exposed.
With the fast response time to security problems that has been characteristic of the PHP project, and the fact that these problems (and their subsequent fixes) are usually widely (though often incorrectly) reported by the media, it can be nothing more than a choice to stay on old versions. Therefore since they have chosen to stay on an older, possibly insecure, version, they also have the choice to turn expose_php off for themselves. Jasper

« previous php.internals (#19960) next »