Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:59846
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain punkave.com designates 209.85.216.49 as permitted sender)
2bXbeGjFPaw1=H7anSerAVCOkgY=8iuHcATGB93tuTz_Y9Q@mail.gmail.com> <CAGa2bXacWzafy84_yK=QAmspiZd6Yo+KNKWpywjgLxvqpo32zg@mail.gmail.com>
In-Reply-To: <CAGa2bXacWzafy84_yK=QAmspiZd6Yo+KNKWpywjgLxvqpo32zg@mail.gmail.com>
Mime-Version: 1.0 (1.0)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii
Message-ID: <4274B530-5FB8-4292-9262-37044CF98B8B@punkave.com>
Cc: Stas Malyshev <smalyshev@sugarcrm.com>,
 PHP internals <internals@lists.php.net>
X-Mailer: iPhone Mail (9B176)
Date: Thu, 12 Apr 2012 22:36:13 -0400
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
X-Gm-Message-State: ALoCoQk1QWZbBSS7Cwy1fS0VvcTYEuJmT5wcP2xKdDTtUuLtXSubSPpJXy7tDPyjIQKA+SrupO8u
Subject: Re: [PHP-DEV] Re: Disabling PHP tags by php.ini and CLI options
From: tom@punkave.com (Tom Boutell)

If this is a pecl module library developers cannot use it and trust that on p=
hp 5.n, it just works. That would fork the language in an undesirable way. I=
t should be a core feature, no ini flag, no sometimes-there module.

Sent from my iPhone

On Apr 12, 2012, at 10:00 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> Hi,
>=20
> 2012/4/13 Yasuo Ohgaki <yohgaki@ohgaki.net>:
>> Hi,
>>=20
>> 2012/4/13 Stas Malyshev <smalyshev@sugarcrm.com>:
>>> Hi!
>>>=20
>>>> If I exclude current code, then introducing script only include will be=

>>>> preferred one. I preferred dedicated statement for it though.
>>>>=20
>>>> include
>>>> include_once
>>>> require
>>>> require_once
>>>> script
>>>> script_once
>>>=20
>>> I have a thought here. To implement script/script_once you don't need it=

>>> to be a language construct. A function would do just as fine. Why not
>>> make an extension having these two functions, put it on PECL and see if
>>> people will be using it?
>>> For extreme adopters, you could even make php.ini switch that overrides
>>> include/require and redirects them to your script functions. Shouldn't
>>> be impossible to do, I think.
>>=20
>> Good idea.
>>=20
>> I think it's possible as a Zend engine module. It may be possible
>> as normal module if compiler hook can be used. I guess it is now.
>>=20
>> It provides optional security by accident. (Someone called  LFI syntax
>> error an accident and I like it) I wish the other RFC author
>> implement this.
>>=20
>> Regards,
>=20
> I just briefly read tokenizer code.
> We can simply scan tokens and validate then executes.
> So it's a very simple module to write.
>=20
> Regards,
>=20
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net
>=20
> --=20
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>=20