Rasmus Lerdorf wrote:
Yes, and in normal circumstances you wouldn't accidentally write to places you aren't supposed to, just like in normal circumstances you will have all your file permissions set correctly. And in normal circumstances you would never have bugs in your code.
Attempts to modify common include files are not very likely to be accidental. It is a bit hard to confuse include() with file_put_contents() ;-)
Plus is you leave the file writable, what's to say you couldn't do: shell_exec("cp foo /lib/file/inc.php") ? Ilia -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php