Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:80176
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.171 as permitted sender)
Message-ID: <54AAB794.7060802@gmail.com>
Date: Mon, 05 Jan 2015 16:11:00 +0000
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version: 1.0
To: internals@lists.php.net
References: <CAEPJdu=2oWiSCQOTkO1g5QDs4NrJwd5H14Jks17qrNu7-eQNVg@mail.gmail.com>	<002d01d0281b$1e775730$5b660590$@tekwire.net> <CAEPJdu=3g07OxEYD_iP_kg6RAaMi5=ziqfOESD1vxS0q5SEGXA@mail.gmail.com>
In-Reply-To: <CAEPJdu=3g07OxEYD_iP_kg6RAaMi5=ziqfOESD1vxS0q5SEGXA@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] [RFC] Extension Prepend Files
From: rowan.collins@gmail.com (Rowan Collins)

Benjamin Eberlei wrote on 04/01/2015 13:00:
> Files must be either in the PHP include path, or via absolute path, for
> example by putting them right next to the shared object (.so) files and
> using the extension_dir path inside the code, see the following for an
> example (a hacked approach):
> https://github.com/QafooLabs/php-profiler-extension/blob/master/qafooprofiler.c#L744

Beware that anything that looks in a configurable or 
environment-dependent list of include directories has the potential to 
open up security holes - anyone who can change that setting, or who has 
write access to a directory with higher priority, can inject code in a 
very broad context. It can also lead to surprising side effects if a 
file with the same name is coincidentally placed into more than one 
directory in the search path.

I think if the intention is for extensions to ship these files directly, 
the registration mechanism should create an absolute path based either 
on a single configured directory, which distributors will set based on 
their installation paths, or on the directory containing the .so file 
being loaded.

Regards,
-- 
Rowan Collins
[IMSoP]