Re: new extension txforward

Le jeudi 26 juin 2008, vous avez écrit : > The next steps are: > > - show some code (link to the sources and licenses) Well the current package is there: http://fcartegnie.free.fr/patchs/txforward.html Licence, i don't know. PECL says to link it to PHP licence 3.0. There's not much code to review, as this is a really simple hack. People needs to modify php code when behind reverse proxy, which tends to be a problem when you have multiple customers on the same server. The only case I would point is when this would be running on a web server without proxy, and the remote peers fakes an X-Forwarded header with a string finishing with a period, the ip would copy one byte of data (the variable .len) into ip address. Anyway, the erroneous ip results of a misconfiguration and so results existing security hole.