-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

To a), I'm halfly sure, just read that on some board, so it could be
wrong. I'm going to place a issue later on the tracker.

Matthew Weier O'Phinney schrieb:
> -- Ben Scholzen 'DASPRiD' <[EMAIL PROTECTED]> wrote
> (on Monday, 02 June 2008, 07:52 PM +0200):
>> I just found something very annoying out, while trying to bring my PHP
>> Bot for #zftalk with it's own stream wrapper to my dedicated server:
>>
>> a) allow_url_include in php.ini must be set to On
> 
> Are you sure about this? I'm fairly certain I had that setting off on my
> dev box when testing, as it is off now, and I have not changed it in
> several months. (It's possible that this behavior has changed in the
> most recent PHP release, however.)
> 
>> b) When hardened suhosin patch is applied to PHP (on most debian/ubuntu
>> systems the default), the wrapper must be listed in the php.ini suhosin
>> whitelist, like:
>>
>> suhosin.executor.include.whitelist = "view"
>>
>> That could be a problem, when somebody wants to go online with a project
>> to some random webspace provider, and suddently sees, that he needs that
>> to be enabled, but it isn't.
> 
> That could indeed be an issue, however; I'll need to test that before
> releasing.
> 
>> That should maybe mentioned within the docs, to avoid huge refacoring on
>> developer side.
> 
> Agreed. Could you place an issue in the tracker for this?
> 
> 

- --
...................................
:  ___   _   ___ ___ ___ _ ___    :
: |   \ /_\ / __| _ \ _ (_)   \   :
: | |) / _ \\__ \  _/   / | |) |  :
: |___/_/:\_\___/_| |_|_\_|___/   :
:........:........................:
: Web    : http://www.dasprids.de :
: E-mail : [EMAIL PROTECTED]       :
: Jabber : [EMAIL PROTECTED]     :
: ICQ    : 105677955              :
:........:........................:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIROig0HfT5Ws789ARAt6AAKDV+OXI69Uz3DvGzVxRRx0nxG7L/QCeIVk+
ze5enIa7HHk7nVFpw1MKcwY=
=T47e
-----END PGP SIGNATURE-----

Reply via email to