Re: Policy/thoughts on running/bundling C binaries with PHP package?

Yeah, I can distribute multiple binaries with it, one for each platform. Maybe it's better to just say it relies on having xyz binary installed on your computer beforehand? Are PEAR devs OK with this? I don't see anything insecure about it, since we know what the binary thats being run is... and it wouldn't neccessarily run as the user *installing* the package, it would run as the user *using* the package. I dunno, I'm a bit of a newbie too, so we'll see what others think :-) - Keith Kevin Searle wrote:

Keith, I was reading about this package earlier and questions immediately came to mind: - How do you know what platform the package will be installed on if you're distributing a binary? - From a security standpoint I would also say that it sounds very unsafe, essentially running it as the user that's installing the PEAR package. I don't know what the official policy is, I'm new here. Those are just my thoughts so take them with a grain of newbie salt. Kevin Searle Keith Palmer Jr. wrote:

I'm going to propose a Net_CDDB package soon which is used to access the FreeDB.org audio-cd database to get audio-cd songs names/artist/cd info. for a CD in your cd-drive. In order to do this I need to be able to read the table of contents from the cd-drive. As far as I know I can't do this with just PHP. The best thought I have so far (other ideas?) is to use an external program like 'cd-discid' (http://lly.org/~rcw/cd-discid/) to read the TOC and return the info. to the PHP script. My thoughts are this: Check if the cd-discid program is actually installed (which cd-discid) If it is, execute that one, otherwise, run a bundled executable (Can I bundle executables with PEAR packages? License is GPL, author said its fine to do this) If I can bundle executables with the PEAR package, where do they get placed? Pear extension directory or in the packages directory or...? - Keith