Re: PHP taint support updated
| From: | (Wietse Venema) | Date: | Thu, 31 Jan 2008 12:21:57 +0000 |
| Subject: | Re: PHP taint support updated | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-35057@lists.php.net to get a copy of this message | ||
Mark van der Velden:
> And how does this work with the Filter (
> http://docs.php.net/filter )
> extension ?
SQL, HTML, shell, etc. have different quoting mechanisms. Taint
support can check whether the required quoting mechanism is used,
and is not limited to input from the web client.
Wietse