Re: allow_url_include and php:/data:
| From: | Ilia Alshanetsky | Date: | Sun, 05 Nov 2006 17:03:41 +0000 |
| Subject: | Re: allow_url_include and php:/data: | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-26349@lists.php.net to get a copy of this message | ||
What's to say /drive/smb or letter:// is not an SMB device? Also why break perfectly valid applications that perform operations on networked file systems?
On 5-Nov-06, at 11:41 AM, Peter Brodersen wrote:
Hi, On Sun, 5 Nov 2006 11:23:03 -0500, in php.internals ilia@prohost.org (Ilia Alshanetsky) wrote:Ilia AlshanetskyActually any smb server that is requested thorugh PHP's means of fetching a resource (\\smbserver\...) instead of a device mount in the operating system (e.g. Z:\ ...). --- Peter BrodersenI think it's a fair assumption that a random host specified in that way be treated as suspicious and lumped in under the disable-includes-by-default category.What's random? Non localhost/127.0.0.1 ?