Re: [PATCH] potential solution to user streams + allow_url_include=off

From: Date: Wed, 30 May 2007 00:21:13 +0000
Subject: Re: [PATCH] potential solution to user streams + allow_url_include=off
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-29918@lists.php.net to get a copy of this message
According to the plan below, attached is the patch that restricts user streams from executing dangerous operations inside include context. Please comment.
Forgot to mention - the patch is against HEAD and does not include changing names of INI/structure fields, though it might be a good idea too. -- Stanislav Malyshev, Zend Products Engineer stas@zend.com http://www.zend.com/

« previous php.internals (#29918) next »