Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:27365
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain suso.org designates 216.9.132.134 as permitted sender)
Date: Thu, 11 Jan 2007 16:25:45 +0000
To: Alain Williams <addw@phcomp.co.uk>
Cc: Stefan Esser <sesser@hardened-php.net>,
	Rasmus Lerdorf <rasmus@lerdorf.com>, internals@lists.php.net,
	kel@securityfocus.com
Message-ID: <20070111162545.GM26328@arvo.suso.org>
References: <20070111144144.GV15998@mint.phcomp.co.uk> <45A65B19.40900@lerdorf.com> <45A6600D.1090500@hardened-php.net> <20070111161731.GB15998@mint.phcomp.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20070111161731.GB15998@mint.phcomp.co.uk>
User-Agent: Mutt/1.5.11
Subject: Re: [PHP-DEV] Comments on PHP security
From: mark@suso.org (Mark Krenz)

On Thu, Jan 11, 2007 at 04:17:31PM GMT, Alain Williams [addw@phcomp.co.uk] said the following:
> On Thu, Jan 11, 2007 at 05:04:30PM +0100, Stefan Esser wrote:
> 
> > PS: Stop the "We are secure" marketing and face reality
> 
> More to the point: ''We might be secure because we are careful experienced programmers'',
> however many of those who write in PHP are not careful and/or experienced, we should
> be looking to help those people - there are more of them than they are of us.
> 

 And for the programmers that write programs that require safe mode to
be off or don't provide a provision for having it on.  STOP telling your
users things like "If your webhost has safe mode on then they suck".
Safe mode is the only way to get around certain situations.  Get a clue.
You know who you are.

  Somehow I doubt any of these said programmers are on this list.
Shame.

 Mark


-- 
Mark S. Krenz
IT Director
Suso Technology Services, Inc.
http://suso.org/