Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:83713
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 84288 invoked from network); 24 Feb 2015 23:01:04 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 24 Feb 2015 23:01:04 -0000
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.170 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.216.170 mail-qc0-f170.google.com  
Received: from [209.85.216.170] ([209.85.216.170:45449] helo=mail-qc0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 3B/3B-24698-0B20DE45 for <internals@lists.php.net>; Tue, 24 Feb 2015 18:01:04 -0500
Received: by qcvp6 with SMTP id p6so103500qcv.12
        for <internals@lists.php.net>; Tue, 24 Feb 2015 15:01:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=pyiPo87X8382pVD/4KIygoODHvPWelUTPYexWqxLy0E=;
        b=ddWev0Kb/fwp/kVDwF4bcK+5dtBsJMuwuqnyoED0RbKSONZHPC6QfXn3FxX9xK7x5i
         FHhgHL3jqZNKBnp0K0NnDU9VoPyYkWfkRK1KBZ4giMkrt60OxL6yAJFe+cqYK6qKzQI4
         gKqRHTA2MoXXfwLKbjBi1A/lCn3dpY4czWogP4kponNb7wMOQtcAWquCqVmd4wNOeucI
         eWlZE/JT9Le1pMKIDTBzm2fpLsHprIERGDL5+pr6H9GXvqGrToiXhbPDrJqh4cx8Dt+Q
         O+FQKdLrUmRtzPKhviieY1MIh8PZyGPuorcQ2zIQtIZ2s6q1cobKFFInxZr2Z1oRCkto
         NcYA==
X-Received: by 10.140.38.102 with SMTP id s93mr573135qgs.106.1424818861619;
 Tue, 24 Feb 2015 15:01:01 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.229.198.8 with HTTP; Tue, 24 Feb 2015 15:00:21 -0800 (PST)
In-Reply-To: <CAGa2bXZf3Njqf6VWLbmZvsg=rL7x95HPFc3uJC+sySFRiXpbvg@mail.gmail.com>
References: <CAGa2bXa=LHMT+wdSM_xbHDo1901QDSFa-KotjQckNwVX9wUEUQ@mail.gmail.com>
 <CAGa2bXZ0VCC4ZN0=YU8ZE9LXm8m9j-RJnmYOhd5qrENoa1HimQ@mail.gmail.com>
 <CA+9eiLvV-wY-6BC5FHZM=uMAWm4Ny4Ej_m2F31o6DNGacpfJPQ@mail.gmail.com>
 <CALwr1Gmmy06_4ZgsvUhcf5m7g06vK2s18qmxKBv1gu+syrsbQA@mail.gmail.com>
 <54ECD4E3.9040705@gmail.com> <CALwr1GkY_8TN-HwXnRNL0-1oRfQPJvz0_vyJv_ojUTVsFbkNTQ@mail.gmail.com>
 <54ECF605.7030506@gmail.com> <CAGa2bXZGp5fxu1mPa8bYYSZoxnwpd7Uzq6Be7x3K3HRQxeENPg@mail.gmail.com>
 <54ECFBA7.7080404@gmail.com> <CAGa2bXZf3Njqf6VWLbmZvsg=rL7x95HPFc3uJC+sySFRiXpbvg@mail.gmail.com>
Date: Wed, 25 Feb 2015 08:00:21 +0900
X-Google-Sender-Auth: r2lpg8h6MEHQNw-mxvyTYd62epk
Message-ID: <CAGa2bXb5qLAx0+bgc357DBVhX6=wb6yOFWTCD5vJN5WhE-EucQ@mail.gmail.com>
To: Stanislav Malyshev <smalyshev@gmail.com>
Cc: =?UTF-8?Q?P=C3=A1draic_Brady?= <padraic.brady@gmail.com>, 
	Dmitry Stogov <dmitry@zend.com>, "internals@lists.php.net" <internals@lists.php.net>, 
	Nikita Popov <nikitappv@gmail.com>
Content-Type: multipart/alternative; boundary=001a11c125ec1dc313050fdd7e02
Subject: Re: [PHP-DEV] [RFC] Script only include/require
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11c125ec1dc313050fdd7e02
Content-Type: text/plain; charset=UTF-8

Hi Stas,

On Wed, Feb 25, 2015 at 7:53 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> require('cuteponies.gif) wouldn't work with this RFC.
> move_uploaded_files() prohibits uploading PHP script.
> I noticed that I should forbid destination file extension also by this
> discussion.
> I'll add it soon. Thank you.
>

Oops, I did it right. I forbid destination path to be PHP script.
No change is required to move_uploaded_file().

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11c125ec1dc313050fdd7e02--