Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:83460
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.43 as permitted sender)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
In-Reply-To: <CAGa2bXZ_Q4Ytz5HgcmBoKNPzUaCh6vLETkyyd-jVsR9df60RPg@mail.gmail.com>
References: <CAGa2bXZ_Q4Ytz5HgcmBoKNPzUaCh6vLETkyyd-jVsR9df60RPg@mail.gmail.com>
Date: Sun, 22 Feb 2015 16:32:10 +0900
Message-ID: <CAGa2bXY9hGE7pb+KtqeaXcbY1s1jHL6Q1Qa7xV6m7MyKugN_Ww@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a1135a3dcfa0801050fa84a19
Subject: Re: [RFC] [FINAL DISCUSSION] Script only include/require
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a1135a3dcfa0801050fa84a19
Content-Type: text/plain; charset=UTF-8

Hi all,

On Sat, Feb 21, 2015 at 10:06 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> I think this will be the final discussion before vote.
> This RFC is to make PHP stronger against script inclusion attacks just
> like other languages.
>
> https://wiki.php.net/rfc/script_only_include
>
> I hope everyone will like this proposal.
> Thank you all who have participated to discussions.
>
> Those who are not involved, this is the time to check this RFC.
>
> Thank you.
>

I've wrote initial patch for this RFC

https://github.com/php/php-src/pull/1111

There are some issues to resolve (error, the way comparing extension), but
it works as it supposed. Comments are appreciated.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a1135a3dcfa0801050fa84a19--