Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:62041
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.42 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <501D8091.4070609@ajf.me>
References: <CANVTSm4pseLgp5RnD0Uh5aSvu3Zox6wwu65jDjikTeBXFyySDw@mail.gmail.com>
	<CAF+90c97op9xjozgbcqhkDMDB3NxtiWJ0Ge3w9mW1yro+EEMSQ@mail.gmail.com>
	<501D8091.4070609@ajf.me>
Date: Sat, 4 Aug 2012 22:19:30 +0200
Message-ID: <CAH-PCH5EO1atXceWD5OXb0gnSoxZKKqSqLZMrm8EufJ=DvX5jw@mail.gmail.com>
To: Andrew Faulds <ajf@ajf.me>
Cc: Nikita Popov <nikita.ppv@gmail.com>, Yahav Gindi Bar <g.b.yahav@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=f46d042f972cac970704c6765c9e
Subject: Re: [PHP-DEV] Integrate PECL into PHP
From: tyra3l@gmail.com (Ferenc Kovacs)

--f46d042f972cac970704c6765c9e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 4, 2012 at 10:05 PM, Andrew Faulds <ajf@ajf.me> wrote:

> On 04/08/12 21:03, Nikita Popov wrote:
>
>> On Sat, Aug 4, 2012 at 9:57 PM, Yahav Gindi Bar <g.b.yahav@gmail.com>
>> wrote:
>>
>>> We had dl() until it was deprecated, and even when we got it I guess th=
at
>>> administrators disabled the dl() method because of security reasons.
>>> However, PECL got limited extensions which, as long as I know, does not
>>> put
>>> the server into security risks (maybe I've said something VERY STUPID
>>> right
>>> now, so excuse me...)
>>>
>> PECL extensions are C code. "C code" is programmer slang for "security
>> risk".
>>
>> I mean, seriously, extension code can be pretty much everything.
>> Allowing people to load extensions from userland would go beyond
>> fatal.
>>
>> Nikita
>>
>>  Aren't shared hosting servers pretty well secured, though? If each site
> is under a different userid, surely it can't do much damage?
>
>
from C code any and all php security measure like
open_basedir, allow_url_include, etc. could be bypassed.
of course the preferred way to secure your a multi-user environment is to
do that outside of php (jail/chroot/suexec etc.), but this would be still
an attack vector.
--=20
Ferenc Kov=C3=A1cs
@Tyr43l - http://tyrael.hu

--f46d042f972cac970704c6765c9e--