I'd say you have pretty weird code if you do include $_POST['VAR']; and yet people do exactly that.
And if we had tainting, people would know it's bad, and would know why. :)
Bitmask identifying different taint modes.
Can you elaborate which modes do you propose? -- Stanislav Malyshev, Zend Products Engineer [EMAIL PROTECTED] http://www.zend.com/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php