Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:83952 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 42567 invoked from network); 27 Feb 2015 01:51:05 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 27 Feb 2015 01:51:05 -0000 Authentication-Results: pb1.pair.com header.from=smalyshev@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=smalyshev@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.170 as permitted sender) X-PHP-List-Original-Sender: smalyshev@gmail.com X-Host-Fingerprint: 209.85.192.170 mail-pd0-f170.google.com Received: from [209.85.192.170] ([209.85.192.170:43016] helo=mail-pd0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 95/5B-32582-78DCFE45 for ; Thu, 26 Feb 2015 20:51:04 -0500 Received: by pdev10 with SMTP id v10so17271443pde.10 for ; Thu, 26 Feb 2015 17:51:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=yQbU0IpHrzUltQHM0HqjGOn/w1H1Tkm+UUpnzxvflJo=; b=KUmyzebVdnFNSIiyW8CMSrlnxdwoz2etorW7O10BBj49Ku/zdDxaCUD1yfPT6uGBLG WBh4xuCdRXH8/v9OG8WtpI0M2g72WtC5/0CkTokxoVdwUxSiZaokCwCirNBJjbHci/DP vnyUJREg5/Sh1xHrbbQtzBDgXsrSzEaeZCRymSNU8uvRgaQ6K+pFHi5mDChBipxl8AiP EpOCp/bP5rf41cG+qq+w1OCEhrW4q2zwKz4zxr8yBQKvsvDIveWCDYGlaYW+7F10r18A 8Vl5aqJX7UCJPdR7yiOMoRW8ysNqtD49l9Mm+HrQJOgnvJSDV/CneuB6JFcDtPmPr4ce QGbg== X-Received: by 10.68.131.227 with SMTP id op3mr19565306pbb.157.1425001860854; Thu, 26 Feb 2015 17:51:00 -0800 (PST) Received: from Stas-Air.local (108-66-6-48.lightspeed.sntcca.sbcglobal.net. [108.66.6.48]) by mx.google.com with ESMTPSA id qp3sm2262212pdb.11.2015.02.26.17.50.58 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 26 Feb 2015 17:50:59 -0800 (PST) Message-ID: <54EFCD82.4000009@gmail.com> Date: Thu, 26 Feb 2015 17:50:58 -0800 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Yasuo Ohgaki CC: "internals@lists.php.net" References: <54EE50CF.9090508@gmail.com> <54EE5A39.9040401@gmail.com> <54EEDE8E.6070201@gmail.com> <54EFA3AC.9070406@gmail.com> In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require From: smalyshev@gmail.com (Stanislav Malyshev) Hi! > For this concern, we have 2 classes of wrappers "local" and "remote". > php://input and php://stdin would be issue, since it contains "remote" > input under Web SAPI while it is "local" with CLI. We may handle > php://input and php://stdin separately. php streams are marked with is_url = 0, but the code in php_stream_url_wrap_php already checks for allow_url_include, so it's impossible to use php://input in include when allow_url_include is off. -- Stas Malyshev smalyshev@gmail.com