Re: Comments on PHP security

From: Date: Thu, 11 Jan 2007 17:01:52 +0000
Subject: Re: Comments on PHP security
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-27369@lists.php.net to get a copy of this message
Safe mode does suck, and it utterly useless anyone who knows PHP internals will happily tell you that. On 11-Jan-07, at 11:25 AM, Mark Krenz wrote:
On Thu, Jan 11, 2007 at 04:17:31PM GMT, Alain Williams [addw@phcomp.co.uk] said the following:
On Thu, Jan 11, 2007 at 05:04:30PM +0100, Stefan Esser wrote:
PS: Stop the "We are secure" marketing and face reality
More to the point: ''We might be secure because we are careful experienced programmers'', however many of those who write in PHP are not careful and/or experienced, we should be looking to help those people - there are more of them than they are of us.
And for the programmers that write programs that require safe mode to be off or don't provide a provision for having it on. STOP telling your users things like "If your webhost has safe mode on then they suck". Safe mode is the only way to get around certain situations. Get a clue. You know who you are. Somehow I doubt any of these said programmers are on this list. Shame. Mark --Mark S. Krenz IT Director Suso Technology Services, Inc. http://suso.org/ --PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
Ilia Alshanetsky

« previous php.internals (#27369) next »