Re: RFC: source files without opening tag
| From: | Adam Harvey | Date: | Tue, 10 Apr 2012 08:01:53 +0000 |
| Subject: | Re: RFC: source files without opening tag | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-59627@lists.php.net to get a copy of this message | ||
On 10 April 2012 15:30, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> "allow_url_include" and "template_mode" is similar to me.
>
> allow_url_include: enable only when url include is needed.
> template_mode: enable only when template mode is needed.
>
> allow_url_include prevents RFI which may result in critical security incident.
> template_mode prevents LFI which may result in critical security incident..
>
> Note: template_mode=off is script only mode. On is current behavior.
Honestly, I'd consider allow_url_include a mistake, and would hate to
see additional configuration dependent behaviour enter PHP, as I've
said before.
Adam