Re: Re: [RFC] No PHP tags
| From: | Johannes Schlüter | Date: | Fri, 14 Feb 2014 23:53:44 +0000 |
| Subject: | Re: Re: [RFC] No PHP tags | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-72616@lists.php.net to get a copy of this message | ||
On Sat, 2014-02-15 at 07:28 +0900, Yasuo Ohgaki wrote:
> 3) the include was intended to be non-PHP data, and the attacker
> substitutes PHP code of their choice
> 4) the include was intended to be non-PHP data, and the attacker accesses
> different non-PHP data already on server
People using the wrong feature won't be fixed by adding yet another way
to open a file.
johannes