Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:27363 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 57434 invoked by uid 1010); 11 Jan 2007 16:17:33 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 57419 invoked from network); 11 Jan 2007 16:17:33 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 11 Jan 2007 16:17:33 -0000 Authentication-Results: pb1.pair.com smtp.mail=addw@phcomp.co.uk; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=addw@phcomp.co.uk; sender-id=pass Received-SPF: pass (pb1.pair.com: domain phcomp.co.uk designates 213.152.38.186 as permitted sender) X-PHP-List-Original-Sender: addw@phcomp.co.uk X-Host-Fingerprint: 213.152.38.186 freshmint.phcomp.co.uk Linux 2.5 (sometimes 2.4) (4) Received: from [213.152.38.186] ([213.152.38.186:61391] helo=mint.phcomp.co.uk) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id B9/92-42349-C1366A54 for ; Thu, 11 Jan 2007 11:17:33 -0500 Received: from addw by mint.phcomp.co.uk with local (Exim 4.66) (envelope-from ) id 1H52cN-0008Bi-47; Thu, 11 Jan 2007 16:17:31 +0000 Date: Thu, 11 Jan 2007 16:17:31 +0000 To: Stefan Esser Cc: Rasmus Lerdorf , Alain Williams , internals@lists.php.net, kel@securityfocus.com Message-ID: <20070111161731.GB15998@mint.phcomp.co.uk> References: <20070111144144.GV15998@mint.phcomp.co.uk> <45A65B19.40900@lerdorf.com> <45A6600D.1090500@hardened-php.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <45A6600D.1090500@hardened-php.net> User-Agent: Mutt/1.4.1i Organization: Parliament Hill Computers Ltd Subject: Re: [PHP-DEV] Comments on PHP security From: addw@phcomp.co.uk (Alain Williams) On Thu, Jan 11, 2007 at 05:04:30PM +0100, Stefan Esser wrote: > PS: Stop the "We are secure" marketing and face reality More to the point: ''We might be secure because we are careful experienced programmers'', however many of those who write in PHP are not careful and/or experienced, we should be looking to help those people - there are more of them than they are of us. -- Alain Williams Linux Consultant - Mail systems, Web sites, Networking, Programmer, IT Lecturer. +44 (0) 787 668 0256 http://www.phcomp.co.uk/ Parliament Hill Computers Ltd. Registration Information: http://www.phcomp.co.uk/contact.php #include