Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:83368
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 54216 invoked from network); 21 Feb 2015 01:07:09 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 21 Feb 2015 01:07:09 -0000
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.182 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.216.182 mail-qc0-f182.google.com  
Received: from [209.85.216.182] ([209.85.216.182:41632] helo=mail-qc0-f182.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 79/71-45394-B3AD7E45 for <internals@lists.php.net>; Fri, 20 Feb 2015 20:07:08 -0500
Received: by qcvs11 with SMTP id s11so3644671qcv.8
        for <internals@lists.php.net>; Fri, 20 Feb 2015 17:07:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:from:date:message-id:subject:to:content-type;
        bh=PgO0/lrL3FR9RikwbuHaL6lhsEPInHWvnnjz1+9W5Lo=;
        b=ptaPzsnWsjbyu6888WntaRy/3CkiHyR0G4o6/dRhk9a2ZpL1C8CK4AMel24TPmdURI
         8/DqzPw4EW08Rh1sN4sZRJ+RWPa+TLSmXVoPfkkjDB0yPuwqIKeiNi32qMrxTfSl973U
         3LlL97hFwqhnjrZiagJRkRxrU4cqN3jZ6EF0W8KzjbrF2PxGtzQ1darfKJv/x/YZdAJL
         ZpFoXSpuKtaJxpbkQT04pBAZNdruFz1RyyR1u3wg/3e2EZ6ZkVQUSAb12OVNFhoHjezz
         NSoA3JloJQJ2tvhlCV67R9jX7f0K9irjiuWbqi9Y75CD8fcXHkhzft4kGOTjoOjmKObW
         GFjA==
X-Received: by 10.140.89.111 with SMTP id u102mr1159441qgd.20.1424480824596;
 Fri, 20 Feb 2015 17:07:04 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.229.198.8 with HTTP; Fri, 20 Feb 2015 17:06:24 -0800 (PST)
Date: Sat, 21 Feb 2015 10:06:24 +0900
X-Google-Sender-Auth: dZgbeSTQs0zvlaz7e2ovCL9Kxxc
Message-ID: <CAGa2bXZ_Q4Ytz5HgcmBoKNPzUaCh6vLETkyyd-jVsR9df60RPg@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c13abe8a1db0050f8ec90c
Subject: [RFC] [FINAL DISCUSSION] Script only include/require
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11c13abe8a1db0050f8ec90c
Content-Type: text/plain; charset=UTF-8

Hi all,

I think this will be the final discussion before vote.
This RFC is to make PHP stronger against script inclusion attacks just like
other languages.

https://wiki.php.net/rfc/script_only_include

I hope everyone will like this proposal.
Thank you all who have participated to discussions.

Those who are not involved, this is the time to check this RFC.

Thank you.

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11c13abe8a1db0050f8ec90c--