ID:               35806
 Updated by:       [EMAIL PROTECTED]
 Reported By:      mega-squall at caramail dot com
-Status:           Open
+Status:           Wont fix
 Bug Type:         Feature/Change Request
 Operating System: *
 PHP Version:      5.1.1
 New Comment:

Those debugging functions should not be used in production at all...
they are debugging features. And if they cause security problems you're
definitely doing something very wrong...


Previous Comments:
------------------------------------------------------------------------

[2005-12-26 15:40:25] mega-squall at caramail dot com

Description:
------------
Debug functions (print_r(), var_export()) may access protected/private
elements of objects for debugging puposes, but such a behavior might be
a security hole for some scripts on production status.

I suggest to add a configuration property which may enable or disable
such functions from acessing private/protected elements, for instance
in the php.ini ...



------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=35806&edit=1

Reply via email to