Re: Integrate PECL into PHP
| From: | Nikita Popov | Date: | Sat, 04 Aug 2012 20:03:23 +0000 |
| Subject: | Re: Integrate PECL into PHP | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-62037@lists.php.net to get a copy of this message | ||
On Sat, Aug 4, 2012 at 9:57 PM, Yahav Gindi Bar <g.b.yahav@gmail.com> wrote:
> We had dl() until it was deprecated, and even when we got it I guess that
> administrators disabled the dl() method because of security reasons.
> However, PECL got limited extensions which, as long as I know, does not put
> the server into security risks (maybe I've said something VERY STUPID right
> now, so excuse me...)
PECL extensions are C code. "C code" is programmer slang for "security risk".
I mean, seriously, extension code can be pretty much everything.
Allowing people to load extensions from userland would go beyond
fatal.
Nikita