[RFC][VOTE] Introduce script only include/require
| From: | Yasuo Ohgaki | Date: | Wed, 25 Feb 2015 22:06:03 +0000 |
| Subject: | [RFC][VOTE] Introduce script only include/require | ||
| Groups: | php.internals | ||
| Request: | Send a blank email to internals+get-83829@lists.php.net to get a copy of this message | ||
Hi all,
Vote for script only include/require RFC is started.
This RFC closes one of the fatal security hole in PHP programs with
simple patch.
https://wiki.php.net/rfc/script_only_include
https://github.com/php/php-src/pull/1111
Vote ends 2015/3/12
It seems there are misunderstandings about the issue and the protection.
If you would like to vote "no", please read the RFC carefully.
If you find fatal reason to reject this RFC, it is about arbitrarily code
execution
and file exposure, so please let us know the reason why.
If you have question, please ask.
Thank you for voting.
--
Yasuo Ohgaki
yohgaki@ohgaki.net