On Fri, 12 Aug 2005, George Schlossnagle wrote:

> > 3. Add input filter extension which will include a mechanism for
> >    application developers to very easily turn it off which would swap
> >    the raw GPC arrays back in case the site had it turned on by 
> >    default.
> 
> That seems a bit scary, and almost  as if it would defeat the purpose.  I'm
> all for an input filter extension, but it should be one that can't be easily
> neutered by (potentially malicious) applications.

I wrote up the following spec for this extension:
http://files.derickrethans.nl/filter_extension.html

Derick

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to