Re: Re: [RFC][VOTE] Introduce script only include/require

From: Date: Fri, 27 Feb 2015 02:39:35 +0000
Subject: Re: Re: [RFC][VOTE] Introduce script only include/require
References: 1 2 3 4 5 6 7 8 9 10 11 12  Groups: php.internals 
Request: Send a blank email to internals+get-83955@lists.php.net to get a copy of this message
Hi Stas, On Fri, Feb 27, 2015 at 10:50 AM, Stanislav Malyshev <smalyshev@gmail.com> wrote: > > For this concern, we have 2 classes of wrappers "local" and "remote". > > php://input and php://stdin would be issue, since it contains "remote" > > input under Web SAPI while it is "local" with CLI. We may handle > > php://input and php://stdin separately. > > php streams are marked with is_url = 0, but the code in > php_stream_url_wrap_php already checks for allow_url_include, so it's > impossible to use php://input in include when allow_url_include is off. Thank you for the input. I've updated the RFC to have types of wrappers. I was thinking make it simple at first, but the patch will be rather large patch to pass around parameter which wrappers are allowed. I'll change the API so that it can work. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.internals (#83955) next »