-- Ben Scholzen 'DASPRiD' <[EMAIL PROTECTED]> wrote
(on Monday, 02 June 2008, 07:52 PM +0200):
> I just found something very annoying out, while trying to bring my PHP
> Bot for #zftalk with it's own stream wrapper to my dedicated server:
> 
> a) allow_url_include in php.ini must be set to On

Are you sure about this? I'm fairly certain I had that setting off on my
dev box when testing, as it is off now, and I have not changed it in
several months. (It's possible that this behavior has changed in the
most recent PHP release, however.)

> b) When hardened suhosin patch is applied to PHP (on most debian/ubuntu
> systems the default), the wrapper must be listed in the php.ini suhosin
> whitelist, like:
> 
> suhosin.executor.include.whitelist = "view"
> 
> That could be a problem, when somebody wants to go online with a project
> to some random webspace provider, and suddently sees, that he needs that
> to be enabled, but it isn't.

That could indeed be an issue, however; I'll need to test that before
releasing.

> That should maybe mentioned within the docs, to avoid huge refacoring on
> developer side.

Agreed. Could you place an issue in the tracker for this?


-- 
Matthew Weier O'Phinney
Software Architect       | [EMAIL PROTECTED]
Zend Framework           | http://framework.zend.com/

Reply via email to