Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:14509 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 67458 invoked by uid 1010); 2 Feb 2005 05:04:41 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 65510 invoked from network); 2 Feb 2005 05:04:14 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 2 Feb 2005 05:04:14 -0000 X-Host-Fingerprint: 17.250.248.87 smtpout.mac.com FreeBSD 4.8-5.1 (or MacOS X 10.2-10.3) Received: from ([17.250.248.87:65255] helo=smtpout.mac.com) by pb1.pair.com (ecelerity HEAD (r4105:4106)) with SMTP id 1E/A7-00705-D4F50024 for ; Wed, 02 Feb 2005 00:04:13 -0500 Received: from mac.com (smtpin07-en2 [10.13.10.152]) by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id j1254APK029515; Tue, 1 Feb 2005 21:04:10 -0800 (PST) Received: from [192.168.1.104] (c-67-169-70-104.client.comcast.net [67.169.70.104]) (authenticated bits=0) by mac.com (Xserve/smtpin07/MantshX 4.0) with ESMTP id j12548qZ020405; Tue, 1 Feb 2005 21:04:10 -0800 (PST) In-Reply-To: <42001D7B.1040707@trickie.org> References: <5.1.0.14.2.20050201142816.026d21c0@localhost> <5.1.0.14.2.20050201111730.0299da70@localhost> <5.1.0.14.2.20050201111730.0299da70@localhost> <5.1.0.14.2.20050201142816.026d21c0@localhost> <5.1.0.14.2.20050201151955.02730ec0@localhost> <4200169A.6050905@lerdorf.com> <42001C1D.3090105@cschneid.com> <42001D7B.1040707@trickie.org> Mime-Version: 1.0 (Apple Message framework v619) Content-Type: multipart/signed; micalg=sha1; boundary=Apple-Mail-15-164423977; protocol="application/pkcs7-signature" Message-ID: Cc: internals@lists.php.net Date: Tue, 1 Feb 2005 21:04:02 -0800 To: Nick Loeve X-Mailer: Apple Mail (2.619) Subject: Re: [PHP-DEV] PHP 5.1 From: ryansking@mac.com (Ryan King) --Apple-Mail-15-164423977 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed On Feb 1, 2005, at 4:23 PM, Nick Loeve wrote: > >> Rasmus Lerdorf wrote: >> >>> I don't actually see it as a per-script thing. Obviously the ini >>> would be per-dir Apache configurable, but I see this as being >>> something set across the board on a dedicated server that defines >>> the security policy of that server. >> > Isn't that something you can use mod_security for? I don't know of the > availability of that module on a standard host, but on a dedicated > server you could install it. I believe the host I use, Text Drive (http://textdrive.com) uses it. And I can speak highly enough about them. -ryan -- http://theryanking.com/blog --Apple-Mail-15-164423977 Content-Transfer-Encoding: base64 Content-Type: application/pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGFjCCAs8w ggI4oAMCAQICAw2spzANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhh d3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt YWlsIElzc3VpbmcgQ0EwHhcNMDQxMjIyMDMxNzAzWhcNMDUxMjIyMDMxNzAzWjBDMR8wHQYDVQQD ExZUaGF3dGUgRnJlZW1haWwgTWVtYmVyMSAwHgYJKoZIhvcNAQkBFhFyeWFuc2tpbmdAbWFjLmNv bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIr+3HKm0IPmOHOkuZEOEB9LwbNzkgK ma5pKv4DTBZ/3QYsGd6ZlVkUVIYhAAsz2ZwX/0gMAecvPEJoRwPJciU4Ogg8fAuYP4UJzBlsoxm6 3in+3/nHfpoXOeNg/vQsndqKKtVI1K8OKQOPtt9udJdVTCnmih9h6KwYcO//ttlfj2oHGMq+qU7h 2oFOP+BTz7wbI6MC6zqQP0N5BeYOpjXOi2akGlsbOjIcXmYqV1Qj9SdXZ/RLWC1z/VFP0PrtOkoe Ph1vmaxNPffutJIgkcUgKSQI8rgz1kFx+i+oeWr9RUXdjl4GoFDMZBQDxqhA0AuxQwDmSOs9gEXL ed8/oysCAwEAAaMuMCwwHAYDVR0RBBUwE4ERcnlhbnNraW5nQG1hYy5jb20wDAYDVR0TAQH/BAIw ADANBgkqhkiG9w0BAQQFAAOBgQDAW04jxnj1FdPi4SyWyZs46LCA3nbryAGzExnryC1QyYiEmAUi IVnIHXT7ffMAd6YkzlT3mqmDvdzD5KIf8jH9ZN+eH6RQQmof8HmrdqhCTbHp1MjiFIqygtkLFYAj 7QMNLaNfPdWSQxbYabAXTPMhqkD9EXwr0LQSJBo+t/nJDzCCAz8wggKooAMCAQICAQ0wDQYJKoZI hvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcT CUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmlj YXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp bCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3 MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUg Q29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwg SXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRw nd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+R NiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEA AaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwu dGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQEAwIBBjApBgNV HREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcNAQEFBQADgYEA SIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t4WFiw9k6GX6E sZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpbNU1341YheILc IRk13iSx0x1G/11fZU8xggLnMIIC4wIBATBpMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1h aWwgSXNzdWluZyBDQQIDDaynMAkGBSsOAwIaBQCgggFTMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B BwEwHAYJKoZIhvcNAQkFMQ8XDTA1MDIwMjA1MDQwM1owIwYJKoZIhvcNAQkEMRYEFBf4KXgl5sXa LFruG3CIHOKu9fTZMHgGCSsGAQQBgjcQBDFrMGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRo YXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVl bWFpbCBJc3N1aW5nIENBAgMNrKcwegYLKoZIhvcNAQkQAgsxa6BpMGIxCzAJBgNVBAYTAlpBMSUw IwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVy c29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIDDaynMA0GCSqGSIb3DQEBAQUABIIBAKf0KX4DtxSz F0EB//mDZ/FlD0DJZYG5VqwZEInm2F+z+IxnR7JOxCKDTSb0lOU0lniqyJuHozx60HjNUfnAjow5 DnlJsBWUaxf1li7yxWMC5as+PPxU6cgyq5WTKKGuiEDeBgwL5Pcqko/Z/YbI/F5FtjX7C3brMymH QriWE81yfDWl4ICEhsvNkWb8HVw7lwsvRJRF2eafTMfm0YI8cBd3pm/GgVa5G8Tj2xISj1dnPYVm 76XlSVAiPAuzYoyKzjqriT0Kx5p5h5Hklfat3ByyJNzrtTWhs+wk/i47sAjgQMBvuSJLIHW9RbZy /+RtcQEmzhHxRh7MM13MhkKUTm0AAAAAAAA= --Apple-Mail-15-164423977--