Re: Re: [RFC] No PHP tags
| From: | Yasuo Ohgaki | Date: | Sat, 15 Feb 2014 00:03:23 +0000 |
| Subject: | Re: Re: [RFC] No PHP tags | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-72618@lists.php.net to get a copy of this message | ||
Hi Johannes,
On Sat, Feb 15, 2014 at 8:53 AM, Johannes Schlüter
<johannes@schlueters.de>wrote:
> On Sat, 2014-02-15 at 07:28 +0900, Yasuo Ohgaki wrote:
> > 3) the include was intended to be non-PHP data, and the attacker
> > substitutes PHP code of their choice
> > 4) the include was intended to be non-PHP data, and the attacker accesses
> > different non-PHP data already on server
>
> People using the wrong feature won't be fixed by adding yet another way
> to open a file.
I have an idea. Please wait for a new RFC.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net