Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:16958 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 62135 invoked by uid 1010); 28 Jun 2005 09:10:52 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 62120 invoked from network); 28 Jun 2005 09:10:52 -0000 Received: from unknown (HELO xit.nl) (127.0.0.1) by localhost with SMTP; 28 Jun 2005 09:10:52 -0000 X-Host-Fingerprint: 212.238.144.71 korving.demon.nl Received: from ([212.238.144.71:3085] helo=localhost.localdomain) by pb1.pair.com (ecelerity 1.2 r(5656M)) with SMTP id 9A/57-00424-C1411C24 for ; Tue, 28 Jun 2005 05:10:52 -0400 Message-ID: <9A.57.00424.C1411C24@pb1.pair.com> To: internals@lists.php.net References: <20050624055017.25065.qmail@desk.crynwr.com><04.19.22648.2895CB24@pb1.pair.com> <17088.50583.728119.993938@desk.crynwr.com> Date: Tue, 28 Jun 2005 11:04:52 +0200 Lines: 11 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 X-Posted-By: 212.238.144.71 Subject: Re: [PHP-DEV] Re: 'include' Considered Harmful From: r.korving@xit.nl ("Ron Korving") > If the very first thing you have to do with a language feature is make > sure that it doesn't function as designed (which is to execute hostile > content with local privileges), then clearly the design of that > feature is wrong. Or the default value of the configuration setting has been a bad choice? Maybe that's it? Ron