Re: [PHP-DEV] PHP taint support updated

2008-01-31 Thread Wietse Venema
Mark van der Velden: > And how does this work with the Filter ( http://docs.php.net/filter ) > extension ? SQL, HTML, shell, etc. have different quoting mechanisms. Taint support can check whether the required quoting mechanism is used, and is not limited to input from the web client. W

Re: [PHP-DEV] PHP taint support updated

2008-01-31 Thread Mark van der Velden
Wietse Venema wrote: I've uploaded a new version of taint support for PHP. You can find all the files via: ftp://ftp.porcupine.org/pub/php/index.html [..] For examples and details, see the README file, also on-line at: ftp://ftp.porcupine.org/pub/php/php-5.2.5-taint-20080130.README.ht

[PHP-DEV] PHP taint support updated

2008-01-30 Thread Wietse Venema
I've uploaded a new version of taint support for PHP. You can find all the files via: ftp://ftp.porcupine.org/pub/php/index.html This version supports PHP 5.2.5, and fixes one typo in mysqli support (thanks Adam Gundy). Little has changed because I wanted to catch up with the current PHP rele