Re: [RFC][DISCUSSION] Script only includes
| From: | Stanislav Malyshev | Date: | Wed, 11 Feb 2015 18:21:24 +0000 |
| Subject: | Re: [RFC][DISCUSSION] Script only includes | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-82486@lists.php.net to get a copy of this message | ||
Hi!
> I'm not trying to be perfect, but I would like to make PHP as secure as
> other
> languages from script inclusion attacks. It's too easy currently...
PHP is already as secure as the other languages. If you have code in
Python that loads arbitrary file and executes it, you could upload
Python file and execute it. If you have code in Ruby that loads
arbitrary file and executes it, you could upload Ruby file and execute
it. If you have code in C that... you get the idea. Same with PHP.
--
Stas Malyshev
smalyshev@gmail.com