Re: allow_url_include and php:/data:

From: Date: Sun, 05 Nov 2006 17:03:41 +0000
Subject: Re: allow_url_include and php:/data:
References: 1 2 3 4 5 6 7  Groups: php.internals 
Request: Send a blank email to internals+get-26349@lists.php.net to get a copy of this message
What's to say /drive/smb or letter:// is not an SMB device? Also why break perfectly valid applications that perform operations on networked file systems? On 5-Nov-06, at 11:41 AM, Peter Brodersen wrote:
Hi, On Sun, 5 Nov 2006 11:23:03 -0500, in php.internals ilia@prohost.org (Ilia Alshanetsky) wrote:
I think it's a fair assumption that a random host specified in that way be treated as suspicious and lumped in under the disable-includes-by-default category.
What's random? Non localhost/127.0.0.1 ?
Actually any smb server that is requested thorugh PHP's means of fetching a resource (\\smbserver\...) instead of a device mount in the operating system (e.g. Z:\ ...). --- Peter Brodersen
Ilia Alshanetsky

« previous php.internals (#26349) next »