Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:15388
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Date: Fri, 11 Mar 2005 17:14:40 -0500
To: PHP Internals List <internals@lists.php.net>
Message-ID: <20050311221440.GA12230@panix.com>
References: <4231F330.6000705@prohost.org> <20050311212223.GA10370@panix.com> <42320D59.6010507@prohost.org> <20050311213710.GA29902@panix.com> <423210F9.905@prohost.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <423210F9.905@prohost.org>
User-Agent: Mutt/1.4.2.1i
Subject: Re: [PHP-DEV] HALT Patch
From: danielc@analysisandsolutions.com (Daniel Convissor)

On Fri, Mar 11, 2005 at 04:43:21PM -0500, Ilia Alshanetsky wrote:
> Daniel Convissor wrote:
> >Interesting.  I'm wondering about the security implications of this.
> >This makes it very easy to use PHP as a means to propogate all sorts of
> >nasty things.
>
> You can already use PHP to propagate all sorts of nasty things, nothing
> changes in this respect.
>
> >Well, people could even do that today in one script by
> >setting a variable to a base64 encoded string then decoding it.
>
> Sure, BUT this approach makes the final file approximately %30 larger
... snip...

No doubt.  My second point was more to diminish my initial assertion, not
to diminish the validity of your patch.

Thanks,

--Dan

-- 
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
            data intensive web and database programming
                http://www.AnalysisAndSolutions.com/
 4015 7th Ave #4, Brooklyn NY 11232  v: 718-854-0335 f: 718-854-0409