Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:83955 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 52975 invoked from network); 27 Feb 2015 02:40:18 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 27 Feb 2015 02:40:18 -0000 Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.174 as permitted sender) X-PHP-List-Original-Sender: yohgaki@gmail.com X-Host-Fingerprint: 209.85.216.174 mail-qc0-f174.google.com Received: from [209.85.216.174] ([209.85.216.174:36904] helo=mail-qc0-f174.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 0D/6D-32582-119DFE45 for ; Thu, 26 Feb 2015 21:40:17 -0500 Received: by qcrw7 with SMTP id w7so11911564qcr.4 for ; Thu, 26 Feb 2015 18:40:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=t17+migKWIB9fuNLn3o9iR9NaFpmzWJZkC3kTEO1BFA=; b=YvJ4p0vHTU1lhETYsGe6wenoOUWopybVA9uhlP3VQSgcN92N59qFKK3oikQ5aQTnJ5 EIqKsO+/W4uNEnPwtEA3BCzZYU/j5jxrvZHEu+euHQQViIRBwp4CRZvKqNtlbBRTntyQ MK1y1J4f6g046iMBE1aj1iWbRpdmDJnuxv07Opxczjm9vm08Ycfh9xyM4Fh3FvC9qzUe 7qbMuFPq1C6/RuvC1zhzBWljiNnOAmYsZVvfxsyKKF448kuhkJ3NarotT5zVeKU2R+Tn oY9FohZZN+cXvIZ9kgGhlTwmHtSF4DXjDDodq3M/tudnto2YKDN+H6MiF4Fr+aOioXLU Icdg== X-Received: by 10.140.148.17 with SMTP id 17mr9671998qhu.0.1425004815227; Thu, 26 Feb 2015 18:40:15 -0800 (PST) MIME-Version: 1.0 Sender: yohgaki@gmail.com Received: by 10.229.198.8 with HTTP; Thu, 26 Feb 2015 18:39:35 -0800 (PST) In-Reply-To: <54EFCD82.4000009@gmail.com> References: <54EE50CF.9090508@gmail.com> <54EE5A39.9040401@gmail.com> <54EEDE8E.6070201@gmail.com> <54EFA3AC.9070406@gmail.com> <54EFCD82.4000009@gmail.com> Date: Fri, 27 Feb 2015 11:39:35 +0900 X-Google-Sender-Auth: 6mC2p8jBwzqnmBuntfHFoJD7O7A Message-ID: To: Stanislav Malyshev Cc: "internals@lists.php.net" Content-Type: multipart/alternative; boundary=001a1136ef96d09ff9051008c96a Subject: Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require From: yohgaki@ohgaki.net (Yasuo Ohgaki) --001a1136ef96d09ff9051008c96a Content-Type: text/plain; charset=UTF-8 Hi Stas, On Fri, Feb 27, 2015 at 10:50 AM, Stanislav Malyshev wrote: > > For this concern, we have 2 classes of wrappers "local" and "remote". > > php://input and php://stdin would be issue, since it contains "remote" > > input under Web SAPI while it is "local" with CLI. We may handle > > php://input and php://stdin separately. > > php streams are marked with is_url = 0, but the code in > php_stream_url_wrap_php already checks for allow_url_include, so it's > impossible to use php://input in include when allow_url_include is off. Thank you for the input. I've updated the RFC to have types of wrappers. I was thinking make it simple at first, but the patch will be rather large patch to pass around parameter which wrappers are allowed. I'll change the API so that it can work. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net --001a1136ef96d09ff9051008c96a--