Re: allow_url_include and php:/data:
| From: | Stanislav Malyshev | Date: | Sun, 05 Nov 2006 05:51:37 +0000 |
| Subject: | Re: allow_url_include and php:/data: | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-26335@lists.php.net to get a copy of this message | ||
Would requests to a smbserver, e.g. \\10.20.30.40\evil\malicious_php_code.txt be prevented as well? It seems like smbserver requests are regarded as part of the default filesystem wrapper.Good point. Generally I'd say it belongs to the OS, but I'm not sure if you can restrict this from OS side? -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/