Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:26349
Return-Path: <iliaal@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 17112 invoked by uid 1010); 5 Nov 2006 17:03:54 -0000
Delivered-To: ezmlm-scan-internals@lists.php.net
Delivered-To: ezmlm-internals@lists.php.net
Received: (qmail 17096 invoked from network); 5 Nov 2006 17:03:54 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 5 Nov 2006 17:03:54 -0000
Authentication-Results: pb1.pair.com smtp.mail=iliaal@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=iliaal@gmail.com; sender-id=pass; domainkeys=good
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 64.233.162.192 as permitted sender)
DomainKey-Status: good
X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01
X-PHP-List-Original-Sender: iliaal@gmail.com
X-Host-Fingerprint: 64.233.162.192 nz-out-0102.google.com Linux 2.4/2.6
Received: from [64.233.162.192] ([64.233.162.192:19315] helo=nz-out-0102.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id CF/D4-10980-8791E454 for <internals@lists.php.net>; Sun, 05 Nov 2006 12:03:53 -0500
Received: by nz-out-0102.google.com with SMTP id o1so668549nzf
        for <internals@lists.php.net>; Sun, 05 Nov 2006 09:03:49 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer:sender;
        b=RUpjYx/vYHuEviykzwk7iBesmikJVxXfY0BhTQ+ILcYr+2xwrYQQBn2fQrLiLzshQF9w0IJ6ZwtxTePVfneiXa5X8wwXgotqg4+Nf7H0yZ2lWJB2wUqcFPUCWQlcN5fsT4UjuoQL8BZPIiXWA1pls/zMkQhNjhKLxGeoUaH5Di4=
Received: by 10.65.188.20 with SMTP id q20mr4022522qbp.1162746229664;
        Sun, 05 Nov 2006 09:03:49 -0800 (PST)
Received: from ?192.168.1.6? ( [74.108.69.82])
        by mx.google.com with ESMTP id a5sm5281610qbd.2006.11.05.09.03.48;
        Sun, 05 Nov 2006 09:03:49 -0800 (PST)
In-Reply-To: <ps4sk2lcrq4eqmcm3o23bh3q1piko4qsl4@4ax.com>
References: <454C5E50.4030108@zend.com> <454CFAA1.10104@lerdorf.com> <aqvpk2df25h8lc2s6326i8igoh20uj6q1v@4ax.com> <1EA6BEDC-ED17-4FE7-BDB1-B5E5C4FC4BFB@prohost.org> <4e89b4260611050813x42dc16fq74fc6ee240a0038d@mail.gmail.com> <2D1DBDC4-F023-43D1-8A9E-BAB953504BCB@prohost.org> <ps4sk2lcrq4eqmcm3o23bh3q1piko4qsl4@4ax.com>
Mime-Version: 1.0 (Apple Message framework v752.3)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-ID: <0936D8A3-72A3-4BD9-8394-AA0BC2193F56@prohost.org>
Cc: internals@lists.php.net,
 Wez Furlong <kingwez@gmail.com>,
 "Rasmus Lerdorf" <rasmus@lerdorf.com>
Content-Transfer-Encoding: 7bit
Date: Sun, 5 Nov 2006 12:03:41 -0500
To: Peter Brodersen <penguin@php.net>
X-Mailer: Apple Mail (2.752.3)
Sender: Ilia Alshanetsky <iliaal@gmail.com>
Subject: Re: [PHP-DEV] allow_url_include and php:/data:
From: ilia@prohost.org (Ilia Alshanetsky)

What's to say /drive/smb or letter:// is not an SMB device? Also why  
break perfectly valid applications that perform operations on  
networked file systems?


On 5-Nov-06, at 11:41 AM, Peter Brodersen wrote:

> Hi,
>
> On Sun, 5 Nov 2006 11:23:03 -0500, in php.internals ilia@prohost.org
> (Ilia Alshanetsky) wrote:
>
>>> I think it's a fair assumption that a random host specified in that
>>> way be treated as suspicious and lumped in under the
>>> disable-includes-by-default category.
>>
>> What's random? Non localhost/127.0.0.1 ?
>
> Actually any smb server that is requested thorugh PHP's means of
> fetching a resource (\\smbserver\...) instead of a device mount in the
> operating system (e.g. Z:\ ...).
>
> -- 
> - Peter Brodersen
>

Ilia Alshanetsky