SC>> 2. php's dl implementation is broken by design, it should never unload a 
SC>> dl.  not only is that a performance issue, but it requires all kinds of 
SC>> code to verify that the dl CAN be unloaded properly, thus the problem 
SC>> with dl in php.

Heya... If you don't unload dl(), all arguments about ISPs that use dl() 
for managing extension access go to the drain. So why would you need dl() 
then, again?

SC>> 3. there are no security implications of allowing dl to work only on a 
SC>> single specific directory (or sub directories of that)

So argument about "allowing users load extensions when there's no access 
to php.ini" is dead too - if they don't have php.ini, why would they have 
access to that golden directory - which is much more serious security 
risk? 

So, remind me, why do you need dl() at all?

-- 
Stanislav Malyshev, Zend Products Engineer   
[EMAIL PROTECTED]  http://www.zend.com/ +972-3-6139665 ext.109

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to