[PHP-DEV] 'include' Considered Harmful

2005-06-24 Thread nelson-lists
I believe that the 'include' operator is intrinsically harmful. As evidence I introduce three exhibits: Google for "php security flaw". The very first page you find will explain how a very common use of 'include' is insecure. As the second bit of evidence, I introduce the fact both of the naive p

[PHP-DEV] Developer Newbie Questions

2003-07-25 Thread lists
Hello, I am presently trying to figure out the ZEND API, but am being thrown off a bit by some of the abbreviations. Is there any documentation out there that explains what the abbreviations mean? For example TSRMLS_* Also how would one go about getting the value of a user defined