Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:27444 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 6071 invoked by uid 1010); 14 Jan 2007 21:06:50 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 6056 invoked from network); 14 Jan 2007 21:06:50 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 14 Jan 2007 21:06:50 -0000 Authentication-Results: pb1.pair.com smtp.mail=greg@chiaraquartet.net; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=greg@chiaraquartet.net; sender-id=unknown Received-SPF: error (pb1.pair.com: domain chiaraquartet.net from 66.79.163.178 cause and error) X-PHP-List-Original-Sender: greg@chiaraquartet.net X-Host-Fingerprint: 66.79.163.178 bluga.net Linux 2.5 (sometimes 2.4) (4) Received: from [66.79.163.178] ([66.79.163.178:40429] helo=mail.bluga.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 34/6D-12132-A6B9AA54 for ; Sun, 14 Jan 2007 16:06:50 -0500 Received: from mail.bluga.net (mail.bluga.net [127.0.0.1]) by mail.bluga.net (Postfix) with ESMTP id 9842187406; Sun, 14 Jan 2007 12:58:54 -0800 (PST) Received: from [192.168.0.2] (user-0cdf20n.cable.mindspring.com [24.215.136.23]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.bluga.net (Postfix) with ESMTP id 3937987391; Sun, 14 Jan 2007 12:58:52 -0800 (PST) Message-ID: <45AA982F.6070707@chiaraquartet.net> Date: Sun, 14 Jan 2007 14:53:03 -0600 User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: Stefan Esser CC: Marcus Boerger , Ilia Alshanetsky , Rasmus Lerdorf , "internals@lists.php.net" References: <45A8FC49.7050909@hardened-php.net> <45A90809.3050008@lerdorf.com> <45A91002.8020607@hardened-php.net> <526994769.20070113181330@marcus-boerger.de> <904174835.20070113183221@marcus-boerger.de> <45A91AE0.2070407@hardened-php.net> <45A9B012.3000903@php.net> <45AA12AB.40404@hardened-php.net> In-Reply-To: <45AA12AB.40404@hardened-php.net> X-Enigmail-Version: 0.94.1.2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP Subject: Re: [PHP-DEV] Comments on PHP security From: greg@chiaraquartet.net (Greg Beaver) Stefan Esser wrote: > Greg, > > i was not talking about providing all the different versions of include. Ah, was this include_url some kind of ini setting you were talking about? Greg