Re: RFC: source files without opening tag
| From: | Chris Stockton | Date: | Tue, 10 Apr 2012 04:08:47 +0000 |
| Subject: | Re: RFC: source files without opening tag | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-59614@lists.php.net to get a copy of this message | ||
Hello,
On Mon, Apr 9, 2012 at 8:25 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi,
>
> There is valid usage for allow_url_include=on.
>
> For instance, if both server and client is PHP, we could use var_export()
> to receive messages.
>
> Client
> ----
> <?php
> include('http://server/send_my_data.php');
> ?>
> ----
>
> Server: /send_my_data.php
> ----
> <?php
> echo "$response = ";
> var_export($some_useful_data);
> ?>
> ----
>
> This is the most efficient way to exchange data between PHP servers.
> People does this should not security issues, though.
>
> BTW, do you remember allow_rul_fopen was changed to INI_SYSTEM?
> This should be INI_ALL as well as allow_rul_include, IMO.
>
> Regards,
>
Perhaps you could bring your discussion to the php general mailing
list as opposed to the internals? You might find a good bit of
reasonable feedback and information for handling user input there, in
the exact scenarios you mentioned.
-Chris