On Thu, 29 Jun 2023 at 11:40, BohwaZ <p...@bohwaz.net> wrote: > > I'm sorry to disagree, but changing this would be a bad idea for > security. > > I'm quite sure that I never want users to be able to load any > extension through SQL, or it would mean trouble :( > > So just like in the SQLite3 extension, extension loading should be > limited to using the PHP method, not SQL.
Yes? I think you possibly misread my email. Danack wrote: > > As that means that SQLite extensions can only be loaded through C code > (not through SQL), aka the Sqlite people improved the api around extension loading since it was implemented in the Sqlite3 extension https://www.sqlite.org/c3ref/load_extension.html So the only way to load an extension would be through the PHP loadExtension method, it wouldn't be possible to load one through SQL. > it would be great to also have Sorry, I am in too much pain to look at those before the deadline. There is always 8.4 https://www.youtube.com/watch?v=wccRif2DaGs . cheers Dan Ack -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: https://www.php.net/unsub.php
