[PHP-DEV] Re: [PHP-DOC] Fwd: Re: [PHP-DEV] filesystem security questions

2002-06-12 Thread Gabor Hojtsy
Can someone please help out Wez? ;) I don't really know what streams are about [it's not documented ;)], so if it's a new extension, Wez can start with copy-pasting one extensions documentation (see phpdoc/en/reference/ANY_EXTENSION_NAME). The XML files are quite self descriptive, so the tags

Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Dan Allen
I personally thing there are FAR more important things to work on in this extension before we even address this issue. For instance: - relative xpath queries #1!! - namespace support in xpath (meaning auto register from the xml context) - fixing get_element_by_id to just name a few. Dan

Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Wez Furlong
If one of the doc guys can create a section in the docs as a skeleton, I'll make an effort to fill in the docs, but I have very limited time for a couple of months :-/ --Wez. On 08/06/02, Andi Gutmans [EMAIL PROTECTED] wrote: At 12:42 PM 6/8/2002 +0200, Markus Fischer wrote: Practically,

Fwd: Re: [PHP-DEV] filesystem security questions

2002-06-11 Thread Andi Gutmans
Can someone please help out Wez? ;) Thanks, Andi From: Wez Furlong [EMAIL PROTECTED] Date: Wed, 12 Jun 2002 01:39:53 +0100 To: Andi Gutmans [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], Wez Furlong [EMAIL PROTECTED] Subject: Re: [PHP-DEV] filesystem security questions If one of the doc guys can

[PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
I have a few questions about correctly implementing safe_mode, open_basedir and allow_url checks within an extension. Probably an easy question, but I have seen it implemented in various ways in different extensions and want to make sure i implement this correctly. allow_url checks: is there

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Markus Fischer
Hi, On Sat, Jun 08, 2002 at 06:22:29AM -0400, Rob Richards wrote : I have a few questions about correctly implementing safe_mode, open_basedir and allow_url checks within an extension. Probably an easy question, but I have seen it implemented in various ways in different extensions and

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Andi Gutmans
At 12:42 PM 6/8/2002 +0200, Markus Fischer wrote: Practically, there's no documentation about streams except some mail Wez sent to php-dev a few weeks (months?) ago (and the sources, of course), I hope you can find it in the archives. Maybe we can get Wez to write complete

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
I think using stream functions may be overkill for what I need to do. While fixing an issue with using relative paths in domxml and decided to add filesecurity features in at the same time. The file path comes in as a string and is sent directly to libxml as such. also, going through the

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Melvyn Sopacua
Hi Rob, At 13:22 8-6-2002, Rob Richards shared with all of us: right now I am using the following to test for a remote path: if (!strncasecmp(file,http://;, 7) || !strncasecmp(file,ftp://;, 6)) { which could be expanded upon if additional protocols are added to libxml. From a user's

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Markus Fischer
Are you talking about your own extension or ext/domxml ? I think (but could be wrong) that sooner or later streams should be used everyone for consistency. - Markus On Sat, Jun 08, 2002 at 07:22:25AM -0400, Rob Richards wrote : I think using stream functions may be overkill

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
: Markus Fischer [EMAIL PROTECTED] To: Rob Richards [EMAIL PROTECTED] Cc: Php-Dev List [EMAIL PROTECTED] Sent: Saturday, June 08, 2002 10:16 AM Subject: Re: [PHP-DEV] filesystem security questions Are you talking about your own extension or ext/domxml ? I think (but could be wrong

Re: [PHP-DEV] filesystem security questions

2002-06-08 Thread Rob Richards
The more I think about it, I dont know if streams should be done in the domxml extension currently. This is a big change from its current implementation and if it was to be undertaken, then why not just start fresh with the unified implementation? You are talking about implementing everything as