Re: [PHP-DEV] About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)

2012-02-16 Thread Kousuke Ebihara
quot; to access to that setting value, so that result might not be affected zend_alter_ini_entry_ex(). But a result of "ini_get()" uses a setting value after the zend_alter_ini_entry_ex() calling, so it reports 0. The above is just my guessing because I'm not an expert of PHP C source co

[PHP-DEV] Re: About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)

2012-02-14 Thread Kousuke Ebihara
rect. magic_quotes_gpc is just a fail-safe (but of course it is tattered) and a script which depends on magic_quotes_gpc is intrinsically vulnerable. -- Kousuke Ebihara http://co3k.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)

2012-02-14 Thread Kousuke Ebihara
u are completly unprotected > in every case and magic_quotes was one of the badest > things ever implemented > Of course I agree with you. (And, basically, we should use prepared statement but it is not main topic...) - -- Kousuke Ebihara http://co3k.org/ -BEGIN PGP SIGNATURE- Versio

[PHP-DEV] About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)

2012-02-14 Thread Kousuke Ebihara
), ini_get("magic_quotes_gpc"));' string(5) "5.3.4" string(1) "1" $ echo 'magic_quotes_gpc=On' > /tmp/php.ini && php-5.3.3 -c /tmp/php.ini -r 'var_dump(phpversion(), ini_get("magic_quotes_gpc"));' string(5) "5.3.3"

Re: [PHP-DEV] PHP5.4 RC4 strange behavior

2012-01-09 Thread Kousuke Ebihara
o connect to > MSSQL again. 5.3 is fine with that code. > I have no idea whether there is a problem with PHP-core or pdo_sqlsrv. > > Thanks so far, > regards > -- Kousuke Ebihara http://co3k.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] GitHub mirror is not worked

2010-04-07 Thread Kousuke Ebihara
Hi, http://github.com/php/php-src is not updated for a long time. Probably, it has not worked correctly since removing trunk. I hope that it will work again. (Is this report suitable for this list?) Thanks. -- Kousuke Ebihara -- PHP Internals - PHP Runtime Development Mailing List To

[PHP-DEV] #49785 htmlspecialchars() should check byte sequence more strictly

2009-10-08 Thread Kousuke Ebihara
oding. Would you bring such one? Thanks, -- Kousuke Ebihara ebih...@tejimaya.com http://sns.openpne.jp/?a=page_f_home&target_c_member_id=807 OpenPNE Project http://www.openpne.jp Tejimaya.inc http://tejimaya.com -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, vi