RE : [PHP-DEV] [PATCH] potential solution to user streams + allow_url_include=off
| From: | P) | Date: | Wed, 30 May 2007 19:29:01 +0000 |
| Subject: | RE : [PHP-DEV] [PATCH] potential solution to user streams + allow_url_include=off | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-29964@lists.php.net to get a copy of this message | ||
> From: Stanislav Malyshev [mailto:stas@zend.com]
>
> According to the plan below, attached is the patch that
> restricts user
> streams from executing dangerous operations inside include context.
> Please comment.
I see that you added a boolean arg to stream_wrapper_register(). Why
couldn't it be an integer mask of OR-ed predefined constants, providing
some space for more stream options. A local stream would be created with :
stream_wrapper_register($protocol,$class,STREAM_IS_LOCAL);
Best regards
Francois