# PHP Tainted Support

- Thread: https://externals.io/message/51572
- Original archive: https://news-web.php.net/php.internals/51572
- Started by Daniel Zulla on 2011-03-05T11:28:56+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #51572 — Daniel Zulla — 2011-03-05T11:28:56+00:00

URL: https://externals.io/message/51572#51572

hi list,
i'm working as a penetration tester and php developer for various german webhosting companies.
i just wanted to ask - what happened to the great idea of tainted-flags in a development-mode
php interpreter, after 2008?

as far as i can see, there are two implementations:
http://wiki.php.net/rfc/taint and coregrasp

i nearly read all the discussions, but i haven't been able to find a clear decision.

--
dan