Re: cvs: pear /XML_Transformer Transformer.php

On Wednesday 15 January 2003 22:28, alexander.merz@t-online.de wrote: > > <b><?php aha ?></b> > > + xml_set_default_handler($parser, > > '_characterData'); > > Passing a PI as CDATA? Isn't it a security risk to keep the programmer > uninformed about an occured PI? No, because that is never parsed as a PI, and in the case of PHP is never executed. > Propose: >function pi_{$target}($data) {} > >ie: pi_php($data) {} Easily done. Still, once I do that I fear that some Genius will come up with pi_php($data) { return eval($data); } which I do not want to happen under all circumstances for obvious reasons. The PHP namespace is as bad as it gets, no need to build an Autobahn for stupidity. Kristian -- Kristian Köhntopp, NetUSE AG, Dr.-Hell-Straße, D-24107 Kiel Tel: +49 431 386 435 00, Fax: +49 431 386 435 99