Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:27223
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain pseudo-infinity.ro from 217.10.193.165 cause and error)
Message-ID: <45970C83.7050500@pseudo-infinity.ro>
Date: Sun, 31 Dec 2006 03:04:03 +0200
User-Agent: Thunderbird 1.5.0.9 (Macintosh/20061207)
MIME-Version: 1.0
To: Antony Dovgal <antony@zend.com>
Cc: Kevin Waterson <kevin@oceania.net>, internals@lists.php.net
References: <20061231094951.48487025.kevin@oceania.net>	<4596F6F8.6030605@zend.com> <20061231104351.6056dc73.kevin@oceania.net> <45970292.2010404@zend.com>
In-Reply-To: <45970292.2010404@zend.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Include fileinfo in core
From: vladb@pseudo-infinity.ro (Vlad Bosinceanu)

Maybe it would be a good idea to have a list of recommended extensions 
for hosting providers that states what functionality an extension 
provides, what it depends upon and some brief analysis of runtime 
overhead and possibilities of abuse. While this would obviously not 
fully solve the problem it may encourage hosts to take extensions that 
are not bundled with the default distribution into consideration. This 
and similar suggestions could be grouped into some sort of guidelines 
for hosting providers.

my 2c and regards,
Vlad Bosinceanu

Antony Dovgal wrote:
> On 12/31/2006 02:43 AM, Kevin Waterson wrote:
>>> While mime_magic is deprecated, it does not mean it cannot be used.
>>> So there certainly is a way to do it without PECL.
>> Currently, but it will be moved sometime in the future.
>>
>>> Anyone capable of installing core extension, is capable of 
>>> installing an extension from PECL, in most cases it's as easy as 
>>> `pecl install <name>`.
>> Not everybody has access to this, particularly in a mutliple hosting 
>> environment.
>
> Sure, but the very same applies to core extensions.
>
>> It would be nice to be able to verify/validate file types by mimetype 
>> with a simple core function
>> that is available on all platforms. If the only way of doing this is 
>> in PECL then portablity
>> is lost and so is any surity of what type of file an uploaded file 
>> may be, without resorting to hacks.
>
> Including an extension into the core does not mean it will become 
> available on all hostings, especially taking into account that this 
> extension has an external dependency (libfile).
>
> Also, I'm not sure I understand what portability you're talking about. 
> ext/mime_magic can be also missing if your sysadmin did not enable it 
> when building PHP.