Hi, 2012/4/15 Rasmus Schultz <ras...@mindplay.dk>: > the closing tag isn't even > required to begin with, so you can really think of "<?php" as a 5-byte > file-header.
If it is supposed to exist always at the beginning of files. Anyway, file extension should not matter and it should be a configuration as it is now. i.e. .phps for php source. Current PHP is like C program without stack smashing/DEP protection. Programmers should write correct codes always, but they do make mistakes. The damage of LFI is extreme and its possibility is common. There should be safer option or protection provided by PHP. One of the motivation of scripting use is safety. Safety comes from memory management of it. Without memory management, there should be much less code execution flaws. However, PHP is ruining the advantage of scripting languages. IMHO. Regards, -- Yasuo Ohgaki yohg...@ohgaki.net -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php