Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:83725
Return-Path: <smalyshev@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 6101 invoked from network); 25 Feb 2015 00:50:20 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 25 Feb 2015 00:50:20 -0000
Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.170 as permitted sender)
X-PHP-List-Original-Sender: smalyshev@gmail.com
X-Host-Fingerprint: 209.85.192.170 mail-pd0-f170.google.com  
Received: from [209.85.192.170] ([209.85.192.170:43433] helo=mail-pd0-f170.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 51/7F-24698-A4C1DE45 for <internals@lists.php.net>; Tue, 24 Feb 2015 19:50:19 -0500
Received: by pdev10 with SMTP id v10so716765pde.10
        for <internals@lists.php.net>; Tue, 24 Feb 2015 16:50:16 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=message-id:date:from:user-agent:mime-version:to:cc:subject
         :references:in-reply-to:content-type:content-transfer-encoding;
        bh=jBePL4mBNiM4KRjsmUjbnDZAS/HfuElmDwVqI1u4mvI=;
        b=UMCmgMzoVr4Qn3Z/sFFAKwA2oLO2VUCWaMnc9oePlRxf1I76uHJaOWGI27mbclHmCt
         T0YxRZsso3t7vVerJP12sLcfXH20nSxzLkfEkZyV/lx/+3k/lSMAzTbYWOoQ5KG3dSvg
         hblfVY/ik1l9ivWY185QQn94SkFQYdyFwnJ3+lge6QfmTetqY5z3G0aOhZEKmJW+PtcU
         o/KkIyTbja2yTrsVEjGHQZKhsCGgda23FkINvfne0ZbsG3uHYwyAx4xCsI1ytvYUGQuU
         bEMcj434ZsgiK7H3CnBfDHzvk1WgemeGGbkTcvAN9r0kssSuQwTvqsSjaBDKYkI13FcL
         STww==
X-Received: by 10.70.13.68 with SMTP id f4mr749775pdc.115.1424825416006;
        Tue, 24 Feb 2015 16:50:16 -0800 (PST)
Received: from Stas-Air.local (108-66-6-48.lightspeed.sntcca.sbcglobal.net. [108.66.6.48])
        by mx.google.com with ESMTPSA id ez1sm40226057pdb.22.2015.02.24.16.50.14
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 24 Feb 2015 16:50:15 -0800 (PST)
Message-ID: <54ED1C46.9050104@gmail.com>
Date: Tue, 24 Feb 2015 16:50:14 -0800
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.4.0
MIME-Version: 1.0
To: =?UTF-8?B?UMOhZHJhaWMgQnJhZHk=?= <padraic.brady@gmail.com>, 
 Dan Ackroyd <danack@basereality.com>
CC: "internals@lists.php.net" <internals@lists.php.net>
References: <CAGa2bXa=LHMT+wdSM_xbHDo1901QDSFa-KotjQckNwVX9wUEUQ@mail.gmail.com>	<CAGa2bXZ0VCC4ZN0=YU8ZE9LXm8m9j-RJnmYOhd5qrENoa1HimQ@mail.gmail.com>	<CA+9eiLvV-wY-6BC5FHZM=uMAWm4Ny4Ej_m2F31o6DNGacpfJPQ@mail.gmail.com>	<CALwr1Gmmy06_4ZgsvUhcf5m7g06vK2s18qmxKBv1gu+syrsbQA@mail.gmail.com>	<54ECD4E3.9040705@gmail.com>	<CALwr1GkY_8TN-HwXnRNL0-1oRfQPJvz0_vyJv_ojUTVsFbkNTQ@mail.gmail.com>	<54ECF605.7030506@gmail.com>	<CALwr1GkU_mumpp-34Pp=gKwZzL3KVEW7JpEnqC5MMtcgM_qEbA@mail.gmail.com>	<CA+kxMuT-jQaT9xyk9dmONdpTz-h0LfWcvu_-caibjvu3XmQuTw@mail.gmail.com> <CALwr1GmdZPs-Ozh62b-JmPrLSTOeTavkV5M7v1-T7EM7kxngUQ@mail.gmail.com>
In-Reply-To: <CALwr1GmdZPs-Ozh62b-JmPrLSTOeTavkV5M7v1-T7EM7kxngUQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] [RFC] Script only include/require
From: smalyshev@gmail.com (Stanislav Malyshev)

Hi!

> That was indeed my point as Yasuo has already explained earlier. Image
> validation would however see a phar a mile off.

How much would you bet against the possibility of a file existing that
can both pass as an image file of some type and as a valid zip or tgz or
tar file? Hint: don't go too high.

-- 
Stas Malyshev
smalyshev@gmail.com