Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:70683
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 35489 invoked from network); 16 Dec 2013 22:49:54 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 16 Dec 2013 22:49:54 -0000
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.128.46 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.128.46 mail-qe0-f46.google.com  
Received: from [209.85.128.46] ([209.85.128.46:47480] helo=mail-qe0-f46.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 71/72-32483-1938FA25 for <internals@lists.php.net>; Mon, 16 Dec 2013 17:49:53 -0500
Received: by mail-qe0-f46.google.com with SMTP id a11so4525285qen.33
        for <internals@lists.php.net>; Mon, 16 Dec 2013 14:49:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=M/37Qp+jKg80u88XrwYmwhRluRZhMgHhr6NDKao68ok=;
        b=AMcSqi0OjGIDa5gyZ8b5qbHd8ng77ss0ZLb5jzauitS6BVPLq/FkGBfCjtB+bRtl48
         bzS5TYPjTgPylRrNKoq9kldgoDxnxzPWRSmVkt5vQ4OmbHDHsGWAvQA/S8k91KhlLlGt
         01qsczzFbp4uBTF6zgpwbaQdCj/Hw/QAFz//4UxLJNpnvA+sVSK7Fq6kf7+6k7qyFOgE
         g789SRBZ0jadWkhaM1uX/JP0qtWYMOG++XqFKUsljL72sdXDq8Yfbm52HYqx4uaQR1ge
         YqiAGwwmSQYyb0bwInIveBJ3AhfvD5jIs/JHGFbbphpd7x+dABZ+4mHWMDAhWfKGGLzV
         23vQ==
X-Received: by 10.49.129.38 with SMTP id nt6mr37215352qeb.78.1387234190694;
 Mon, 16 Dec 2013 14:49:50 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.224.23.129 with HTTP; Mon, 16 Dec 2013 14:49:10 -0800 (PST)
In-Reply-To: <CAGa2bXazAQ9edoq-z9URLZwgAP77yH+MZrsgLpg9+Xe4Ce7QTA@mail.gmail.com>
References: <CAGa2bXbjh7EyzRf_uahHp0rfs21efqReHZKQchvB8CGjNc_Qaw@mail.gmail.com>
 <CAGa2bXbGdC-6hcdEdQmzUn8xVKLa5Ro9NyGyFkhuMueoXuoing@mail.gmail.com>
 <CADajX4DxvtZ3+fX5f6ndHOGmGs+ZAgSPFkRHVOqUwO9y5y1ZZg@mail.gmail.com>
 <CAGa2bXZH1rgh7XzQd-Tswdod4gRAxgj9-fc-hV=49JrEK8fpdw@mail.gmail.com>
 <CAL+t6cH+hKKgWWwF2z8bqX9Sbh1090GPewEMLKc_1ateH3+adA@mail.gmail.com> <CAGa2bXazAQ9edoq-z9URLZwgAP77yH+MZrsgLpg9+Xe4Ce7QTA@mail.gmail.com>
Date: Tue, 17 Dec 2013 07:49:10 +0900
X-Google-Sender-Auth: lZ3Q8j5m9lwofhJcmiBIDoaoxuE
Message-ID: <CAGa2bXY6iAt=BQtCPSKxZaC_1ofrDvDnKK238F3RKBf6K_aNWQ@mail.gmail.com>
To: Sherif Ramadan <theanomaly.is@gmail.com>
Cc: Adam Harvey <aharvey@php.net>, "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=047d7b6d99e028202704edaea162
Subject: Re: [PHP-DEV] Re: Making addslashes() multibyte aware
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--047d7b6d99e028202704edaea162
Content-Type: text/plain; charset=UTF-8

Hi all,

On Tue, Dec 17, 2013 at 7:38 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> The issue here is unreliable locale system for certain locales... Locale
> is system dependent and we cannot do much for it. However, code uses locale
> is in PHP already. e.g. escapeshellcmd/escapeshellarg/fgetcsv or like.
>

To be precise, users who never use zend multibyte and script encoding will
not have security issue.
User who never care about locale will not be affected by this change.

So affected users base would be limited.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--047d7b6d99e028202704edaea162--