Re: [PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-08 Thread Clint Byrum
On Wed, 2010-12-08 at 18:49 +, Gustavo Lopes wrote: > On Wed, 08 Dec 2010 15:10:30 -, Clint Byrum wrote: > > > On Wed, 2010-12-08 at 01:11 +, Gustavo Lopes wrote: > >> > >> For instance, current scripts can, in POST requests, read any number of > >> times from php://input or $HTTP_RAW

Re: [PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-08 Thread Gustavo Lopes
On Wed, 08 Dec 2010 15:10:30 -, Clint Byrum wrote: On Wed, 2010-12-08 at 01:11 +, Gustavo Lopes wrote: For instance, current scripts can, in POST requests, read any number of times from php://input or $HTTP_RAW_POST_DATA (to simplify, let's say we even let go $HTTP_RAW_POST_DATA). Fo

Re: [PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-08 Thread Clint Byrum
On Wed, 2010-12-08 at 01:11 +, Gustavo Lopes wrote: > On Wed, 08 Dec 2010 00:45:56 -, Tjerk Meesters > wrote: > > > Don't have much knowledge about the internal workings of the engine, but > > I'm wondering if it's possible to apply "lazy loading" to the $_POST > > variable, so that

Re: [PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-07 Thread Gustavo Lopes
On Wed, 08 Dec 2010 00:45:56 -, Tjerk Meesters wrote: Don't have much knowledge about the internal workings of the engine, but I'm wondering if it's possible to apply "lazy loading" to the $_POST variable, so that processing only happens if and when it's requested. That way you would

Re: [PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-07 Thread Tjerk Meesters
Hi, Don't have much knowledge about the internal workings of the engine, but I'm wondering if it's possible to apply "lazy loading" to the $_POST variable, so that processing only happens if and when it's requested. That way you wouldn't need the ini setting. On Dec 8, 2010 7:54 AM, "Patrick ALLA

[PHP-DEV] RE : Re: [PHP-DEV] [PATCH] Add option to disable POST data processing

2010-12-07 Thread Patrick ALLAERT
It is not the goal to "block" but to prevent the usual processing of $_POST when not required inside a valide POST request which will handle the input differently. Le 7 déc. 2010 23:36, "Tig" a écrit : If the objective is to 'block' POST data from getting to PHP, (in apache) you can use: http://