Re: Comments on PHP security
| From: | Stanislav Malyshev | Date: | Wed, 17 Jan 2007 01:47:34 +0000 |
| Subject: | Re: Comments on PHP security | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27494@lists.php.net to get a copy of this message | ||
Actually, the solution I was envisioning would not allow any access to fsockopen() or other remote streams access things inside a user stream wrapper.Are you sure you can evaluate ALL engine functions that allow accessing remote data? Looks dangerously like safe mode... -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/