tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Option to disable php://filter URL

Greg Troxel <> wrote:

> A good point.  Did you file a bug upstream?  Is the issue that you think
> it's unsafe and they think it's a feature?

Obviously PHP offers it as a feature. The problem is that when you look
at existing software, the feature goes way beyond what most developers
expected, hence it generates security problems.

If you lookup php://filter attack with your favourite search engine, you
will find that the topic is discussed a lot.

Emmanuel Dreyfus

Home | Main Index | Thread Index | Old Index