Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:53135 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 80826 invoked from network); 7 Jun 2011 13:08:13 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 7 Jun 2011 13:08:13 -0000 Authentication-Results: pb1.pair.com header.from=tyra3l@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tyra3l@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.161.170 as permitted sender) DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: tyra3l@gmail.com X-Host-Fingerprint: 209.85.161.170 mail-gx0-f170.google.com Received: from [209.85.161.170] ([209.85.161.170:42531] helo=mail-gx0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 42/99-30784-CB22EED4 for ; Tue, 07 Jun 2011 09:08:13 -0400 Received: by gxk27 with SMTP id 27so2309004gxk.29 for ; Tue, 07 Jun 2011 06:08:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=8sL46kHpplEOXk7wKvIfPQs7ubtre8zdYQYifvdkesw=; b=v9mk4InLQWGLG2QE7dGgivtloMwGmorys6XIjYDZ5YJ3hc54nQk2Y+V/hUcr/7xs1B 5ynIp00+x0pbYTazy9VMqigg3PgMJvvsdlBvQvfl2nJ234vxYPTcQ7ePSYLOBnuN/ODe bdE3MpUUs8W+F0opcwHOF1c0aSy5V7fD16wlY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; b=Bg23DMd2QJtY5eMLXPbQPxEf9xljhZ5oRLZ1if6bysKOAcUGSwr/YOsERtXL2xrBvj NkOHrNCqqijpk4xsEVc+7M0/GW+b3MVq/E/8Bf9ppY85VP7Joo13YFTtrHKpbChctVZc sg0B+CReykjfpjJ6j4AWH+D7sXEfKZPmLYPxs= MIME-Version: 1.0 Received: by 10.236.92.20 with SMTP id i20mr543127yhf.61.1307452090308; Tue, 07 Jun 2011 06:08:10 -0700 (PDT) Sender: tyra3l@gmail.com Received: by 10.147.168.3 with HTTP; Tue, 7 Jun 2011 06:08:10 -0700 (PDT) In-Reply-To: <4DEE21C2.5060305@thelounge.net> References: <8757232E56758B42B2EE4F9D2CA019C901499F97@US-EX2.zend.net> <97.45.23189.8060DED4@pb1.pair.com> <4DED5F9B.7060101@thelounge.net> <4DEDC9F5.3030403@thelounge.net> <4DEDF049.7050504@gmail.com> <4DEDF216.6070308@thelounge.net> <4DEE1D47.8060209@gmail.com> <4DEE21C2.5060305@thelounge.net> Date: Tue, 7 Jun 2011 15:08:10 +0200 X-Google-Sender-Auth: _zsAclSyUQm51DghTzuYm4LySHE Message-ID: To: Reindl Harald Cc: internals@lists.php.net Content-Type: multipart/alternative; boundary=20cf3010e7a767567c04a51ee975 Subject: Re: [PHP-DEV] Bundling "modern" extensions From: info@tyrael.hu (Ferenc Kovacs) --20cf3010e7a767567c04a51ee975 Content-Type: text/plain; charset=UTF-8 On Tue, Jun 7, 2011 at 3:04 PM, Reindl Harald wrote: > > > Am 07.06.2011 14:44, schrieb David Muir: > > On 07/06/11 18:40, Reindl Harald wrote: > >> there is a reason for example to disallow many functions > >> on a webserver - so every API has to make sure they > >> can not be bypassed > >> > >> "because we can" is no valid reason for everything because > >> we can install binary extension as they exist now and > >> if you can not you are missing the permissions for some > >> good reasons > >> > > > > So you're saying that PECL, PNI or FFI should should be actively > > discouraged because of security concerns? > > WHERE i said this? > PECL-Extensions can NOT be enabled by the user > > except if dl is enabled of course. Tyrael --20cf3010e7a767567c04a51ee975--