Kevin Waterson wrote: > This one time, at band camp, Antony Dovgal <[EMAIL PROTECTED]> wrote: > >> Also, to repeat myself here, there is also no way to use filepro database, >> hwapi, msession, >> cpdf, dio, fam, ingres, mnogosearch, yp API, Ovrimos, PayFlow Pro and a >> bunch of other functions >> without using PECL. > > I appreciate your point about not having everything available to core. The > extensions you > mention above are very specific to a task, where-as validating a file > mimetype is quite a > generic procedure. To this end I would like to see more discussion on the > topic. Its very > clear that you are not for it, but lets hear from others?
my opinion count for jack s*** around here but the way I see it if I have a function fopen() as standard then I 'should' have a standard mechanism to figure out what kind of file something is. in practice I control all the servers I work on so doing 'pecl install fileinfo' is not a big deal - but the majority of users don't have that privilege. having fileinfo included as standard will hopefully encourage lots of projects (that are often infamous for security flaws?) to do a little more than check a file's extension when dealing with uploads? > > > Kind regards > Kevin > -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
