Hi!
Yes, there was a discussion in progress about adding or not a input parameter for filenames to do all the checks. That's the only stopping point back then (in January afair). I will check&post again the question and proposal to see if we can get that sorted now.
If there are questions about better implementation etc., we have to just check in the 5.3 fix and we can refactor it later. I think it's not good that we allow trunk to have security-related patch not synchronized with 5.3 for months. I wonder if we have more like this.
-- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227 -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php