Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:43075 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 7060 invoked from network); 17 Feb 2009 17:15:15 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 17 Feb 2009 17:15:15 -0000 Authentication-Results: pb1.pair.com header.from=ilia@prohost.org; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=ilia@prohost.org; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain prohost.org from 74.125.44.30 cause and error) X-PHP-List-Original-Sender: ilia@prohost.org X-Host-Fingerprint: 74.125.44.30 yx-out-2324.google.com Received: from [74.125.44.30] ([74.125.44.30:4758] helo=yx-out-2324.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 17/BD-36931-C90FA994 for ; Tue, 17 Feb 2009 12:15:12 -0500 Received: by yx-out-2324.google.com with SMTP id 8so1130599yxb.83 for ; Tue, 17 Feb 2009 09:15:04 -0800 (PST) Received: by 10.65.112.18 with SMTP id p18mr4076387qbm.87.1234890904297; Tue, 17 Feb 2009 09:15:04 -0800 (PST) Received: from ?192.168.1.111? (TOROON63-1176059019.sdsl.bell.ca [70.25.60.139]) by mx.google.com with ESMTPS id s30sm13899446qbs.20.2009.02.17.09.15.02 (version=TLSv1/SSLv3 cipher=RC4-MD5); Tue, 17 Feb 2009 09:15:03 -0800 (PST) Cc: internals@lists.php.net Message-ID: <491DC47F-DD41-45F7-A4A6-CA17C3F0DE1F@prohost.org> To: Eric Stewart In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v930.3) Date: Tue, 17 Feb 2009 12:15:01 -0500 References: X-Mailer: Apple Mail (2.930.3) Subject: Re: [PHP-DEV] New INIs, Round Two. From: ilia@prohost.org (Ilia Alshanetsky) > 14. A few other directives have been question but I don't have enough > experience with these particular settings so please weight in on them. > > extension_dir = "./" > enable_dl = On I think enable_dl should be off by default in both production and test environments. Aside from being a somewhat a security risk, I think our overall policy has been to discourage the use of dl() to dynamically load extensions into PHP. Ilia Alshanetsky