Hi,

2012/4/15 Rasmus Schultz <ras...@mindplay.dk>:
> the closing tag isn't even
> required to begin with, so you can really think of "<?php" as a 5-byte
> file-header.

If it is supposed to exist always at the beginning of files.

Anyway, file extension should not matter and it should be
a configuration as it is now. i.e. .phps for php source.

Current PHP is like C program without stack smashing/DEP
protection. Programmers should write correct codes always,
but they do make mistakes.  The damage of LFI is extreme
and its possibility is common. There should be safer option or
protection provided by PHP.

One of the motivation of scripting use is safety. Safety comes from
memory management of it. Without memory management, there
should be much less code execution flaws. However,  PHP is
ruining the advantage of scripting languages. IMHO.

Regards,

--
Yasuo Ohgaki
yohg...@ohgaki.net

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to