Re: Run-time taint support proposal
| From: | Stanislav Malyshev | Date: | Fri, 15 Dec 2006 23:28:54 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27003@lists.php.net to get a copy of this message | ||
I'd say you have pretty weird code if you do include $_POST['VAR']; and yet people do exactly that.And if we had tainting, people would know it's bad, and would know why. :)
Bitmask identifying different taint modes.Can you elaborate which modes do you propose? -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/