Re: Run-time taint support proposal
| From: | Ilia Alshanetsky | Date: | Sat, 16 Dec 2006 02:13:02 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27030@lists.php.net to get a copy of this message | ||
On 15-Dec-06, at 7:23 PM, Stanislav Malyshev wrote:
It is not just the phpinfo() servers, it is very much a common case I assure you. Ilia AlshanetskySomething that most servers do (almost 80% by recent stats). http://www.nexen.net/images/stories/phpinfos/display_errors.pngYou mean "most of the servers that allow strangers to read their phpinfo()"? I'm not surprised. You think if they expose their phpinfo you can make it worse by seeing script path in error message?
