Re: Run-time taint support proposal
| From: | Ilia Alshanetsky | Date: | Fri, 15 Dec 2006 23:20:10 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-26998@lists.php.net to get a copy of this message | ||
On 15-Dec-06, at 6:14 PM, Stanislav Malyshev wrote:
I think I've identified a number of reasons why it would not work, if you know how to solve that's great by all means proceed. Ilia AlshanetskyThat's exactly it, PHP is popular because it is easy to use. You take that away and quite frankly there is very little reason to left to use PHP over C#, Python, etc...Well, this is old :) Discussing every feature there are people that say "until PHP does foo-feature, it can not be considered serious language" and "if PHP does foo-feature, it will become Java". Usually both are wrong ;) Tainting would not make PHP into C# or Java, and I think we would take maximum effort to do it in organic way, and that's exactly one of the points that we need to discuss. If you feel it can not be done in principle - you are welcome to argue why.