On 07.02.2011, at 10:51, Lukas Kahwe Smith wrote:

> $file = $dir.DIRECTORY_SEPARATOR.str_replace('\\', DIRECTORY_SEPARATOR, 
> $namespace).DIRECTORY_SEPARATOR.str_replace('_', DIRECTORY_SEPARATOR, 
> $className).'.php';
> $return = @include $file;
> if ($return) {
>    return;
> }
> if (stream_resolve_include_path($file)) {
>    // fail loudly
>    require $file;
>    return;
> }


ok, now i actually tried this concept and realized that its of course BS.

even if the @ would hide a parse error, it of course does not prevent the fatal 
error and therefore it would just die without outputting the parse error.
as a result the above "fail loudly" will never be reached

so nevermind, and sorry for the noise.
however i still think that the fallback stuff should be kicked out in favor of 
include path. that is what it was made for and it makes no sense reimplementing 
it in PHP.

regards,
Lukas Kahwe Smith
[email protected]



-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to