Re: [RFC] [FINAL DISCUSSION] Script only include/require
| From: | Yasuo Ohgaki | Date: | Sun, 22 Feb 2015 07:32:10 +0000 |
| Subject: | Re: [RFC] [FINAL DISCUSSION] Script only include/require | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-83460@lists.php.net to get a copy of this message | ||
Hi all,
On Sat, Feb 21, 2015 at 10:06 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> I think this will be the final discussion before vote.
> This RFC is to make PHP stronger against script inclusion attacks just
> like other languages.
>
> https://wiki.php.net/rfc/script_only_include
>
> I hope everyone will like this proposal.
> Thank you all who have participated to discussions.
>
> Those who are not involved, this is the time to check this RFC.
>
> Thank you.
>
I've wrote initial patch for this RFC
https://github.com/php/php-src/pull/1111
There are some issues to resolve (error, the way comparing extension), but
it works as it supposed. Comments are appreciated.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net