Hi, On Mon, Sep 24, 2018 at 2:21 PM, Arnold Daniels <arnold.adaniels...@gmail.com> wrote: > > > Please have a look at > * https://wiki.php.net/rfc/script_only_include - PHP RFC: Introduce script > only include/require > * https://wiki.php.net/rfc/allow_url_include - PHP RFC: Precise URL include > control > > Both describe the problem and possible solutions. > > Also see > https://www.exploit-db.com/search/?action=search&q=file+inclusion&platform=31 > > Using the filter extension is an alternative solution, which doesn't require > changing the PHP syntax. >
That's really not the clear example I was looking for. But that's ok ... I believe I've made my point already. Hopefully your emails are getting through to the list and others can get involved. Cheers, Andrey. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
