Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:15381
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Date: Fri, 11 Mar 2005 16:37:10 -0500
To: PHP Internals List <internals@lists.php.net>
Message-ID: <20050311213710.GA29902@panix.com>
References: <4231F330.6000705@prohost.org> <20050311212223.GA10370@panix.com> <42320D59.6010507@prohost.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <42320D59.6010507@prohost.org>
User-Agent: Mutt/1.4.2.1i
Subject: Re: [PHP-DEV] HALT Patch
From: danielc@analysisandsolutions.com (Daniel Convissor)

Hi Ilia:

On Fri, Mar 11, 2005 at 04:27:53PM -0500, Ilia Alshanetsky wrote:

> The data will not be parsed or output. When you need it you would make 
> the script open itself and read the (binary) data dump from the end of 
> the file and use it various creative ways.

Interesting.  I'm wondering about the security implications of this.  
This makes it very easy to use PHP as a means to propogate all sorts of 
nasty things.  Well, people could even do that today in one script by 
setting a variable to a base64 encoded string then decoding it.  None the 
less, putting binary data in PHP scripts gives me pause.

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409