[PHP-DEV] Re: [PHP-DOC] Fwd: Re: [PHP-DEV] filesystem security questions

2002-06-12 Thread Gabor Hojtsy
> Can someone please help out Wez? ;) I don't really know what streams are about [it's not documented ;)], so if it's a new extension, Wez can start with copy-pasting one extensions documentation (see phpdoc/en/reference/ANY_EXTENSION_NAME). The XML files are quite self descriptive, so the tags t

Fwd: Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Andi Gutmans
Can someone please help out Wez? ;) Thanks, Andi >From: "Wez Furlong" <[EMAIL PROTECTED]> >Date: Wed, 12 Jun 2002 01:39:53 +0100 >To: "Andi Gutmans" <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED], "Wez Furlong" <[EMAIL PROTECTED]> >Su

Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Wez Furlong
If one of the doc guys can create a section in the docs as a skeleton, I'll make an effort to fill in the docs, but I have very limited time for a couple of months :-/ --Wez. On 08/06/02, "Andi Gutmans" <[EMAIL PROTECTED]> wrote: > At 12:42 PM 6/8/2002 +0200, Markus Fischer wrote: > > Practi

Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Dan Allen
I personally thing there are FAR more important things to work on in this extension before we even address this issue. For instance: - relative xpath queries #1!! - namespace support in xpath (meaning auto register from the xml context) - fixing get_element_by_id to just name a few. Dan Rob

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
The more I think about it, I dont know if streams should be done in the domxml extension currently. This is a big change from its current implementation and if it was to be undertaken, then why not just start fresh with the unified implementation? You are talking about implementing everything as s

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
From: "Markus Fischer" <[EMAIL PROTECTED]> To: "Rob Richards" <[EMAIL PROTECTED]> Cc: "Php-Dev List" <[EMAIL PROTECTED]> Sent: Saturday, June 08, 2002 10:16 AM Subject: Re: [PHP-DEV] filesystem security questions > Are you talking about your o

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Markus Fischer
Are you talking about your own extension or ext/domxml ? I think (but could be wrong) that sooner or later streams should be used everyone for consistency. - Markus On Sat, Jun 08, 2002 at 07:22:25AM -0400, Rob Richards wrote : > I think using stream functions may be overkill fo

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Melvyn Sopacua
Hi Rob, At 13:22 8-6-2002, Rob Richards shared with all of us: >right now I am using the following to test for a remote path: > if (!strncasecmp(file,"http://";, 7) || !strncasecmp(file,"ftp://";, 6)) { >which could be expanded upon if additional protocols are added to libxml. From a user'

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
I think using stream functions may be overkill for what I need to do. While fixing an issue with using relative paths in domxml and decided to add filesecurity features in at the same time. The file path comes in as a string and is sent directly to libxml as such. also, going through the locate_u

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Andi Gutmans
At 12:42 PM 6/8/2002 +0200, Markus Fischer wrote: > Practically, there's no documentation about streams except > some mail Wez sent to php-dev@ a few weeks (months?) ago (and > the sources, of course), I hope you can find it in the > archives. Maybe we can get Wez to write complet

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Markus Fischer
Hi, On Sat, Jun 08, 2002 at 06:22:29AM -0400, Rob Richards wrote : > I have a few questions about correctly implementing safe_mode, open_basedir > and allow_url checks within an extension. > Probably an easy question, but I have seen it implemented in various ways in > different extensions a

[PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
I have a few questions about correctly implementing safe_mode, open_basedir and allow_url checks within an extension. Probably an easy question, but I have seen it implemented in various ways in different extensions and want to make sure i implement this correctly. allow_url checks: is there