On Fri, 12 Aug 2005 20:19:04 +0200 (CEST)
[EMAIL PROTECTED] (Derick Rethans) wrote:

> On Fri, 12 Aug 2005, George Schlossnagle wrote:
> 
> > > 3. Add input filter extension which will include a mechanism
> > > for application developers to very easily turn it off which
> > > would swap the raw GPC arrays back in case the site had it
> > > turned on by default.
> > 
> > That seems a bit scary, and almost  as if it would defeat the
> > purpose.  I'm all for an input filter extension, but it should
> > be one that can't be easily neutered by (potentially malicious)
> > applications.
> 
> I wrote up the following spec for this extension:
> http://files.derickrethans.nl/filter_extension.html

It lools globally good for the principles. Details can be changed
during implementation/experimentations phases.

I only disagree with E_NOTICE. All these validations should be
silent. Derick, as far as I remember, you have some doubts about
that too. As you may noticed before, I have some problems with
noisy functions in general :)

Regards,

--Pierre

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to