Re: Run-time taint support proposal
| From: | Stanislav Malyshev | Date: | Sat, 16 Dec 2006 02:32:30 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27032@lists.php.net to get a copy of this message | ||
It is not just the phpinfo() servers, it is very much a common case I assure you.Well, people leaving such things in their servers should deal with it first, then get to talk about real security :) No solution can help a person who deliberately configures his server wide open. We are talking about people that _try_ to do it secure and we may help them. For those who even doesn't try, well... -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/