note 110473 added to function.curl-setopt

Be careful when changing CURLOPT_SSL_VERIFYHOST or other options to true (boolean). It may cause insecure behavior [1] This is because boolean true casts into integer 1, and CURLOPT_SSL_VERIFYHOST = 1 is not secure behavior. [1] Martin Georgiev and Subodh Iyengar and Suman Jana and Rishita Anubhai and Dan Boneh and Vitaly Shmatikov, The most dangerous code in the world: validating SSL certificates in non-browser software, ACM CCS '12, pp. 38-49, 2012 ---- Server IP: 69.147.83.199 Probable Submitter: 84.240.20.35 ---- Manual Page -- http://www.php.net/manual/en/function.curl-setopt.php Edit -- https://master.php.net/note/edit/110473 Del: integrated -- https://master.php.net/note/delete/110473/integrated Del: useless -- https://master.php.net/note/delete/110473/useless Del: bad code -- https://master.php.net/note/delete/110473/bad+code Del: spam -- https://master.php.net/note/delete/110473/spam Del: non-english -- https://master.php.net/note/delete/110473/non-english Del: in docs -- https://master.php.net/note/delete/110473/in+docs Del: other reasons-- https://master.php.net/note/delete/110473 Reject -- https://master.php.net/note/reject/110473 Search -- https://master.php.net/manage/user-notes.php