On Nov 10, 2007 5:27 PM, Stanislav Malyshev <stas@zend.com> wrote:
> > Hey there all, over the past few days I was thinkering over something
> > that I consider could be a good addition to the core or actually to
> > the php distribution. PhpSecInfo, the project by Ed Finkler. I was
>
> But isn't it a set of PHP scripts? If so, what would be the value of
> making it an extension? There are a lot of very useful PHP scripts,
> which aren't part of core PHP.
Yes there are a lot of very useful packages, but I think this one
could be very good but not only for the users but also php's general
security image/reputation. Yes many settings can be set in a way that
make PHP less safe than what it can be and helping our users getting
towards a more secure application and dev process would be optimal and
very cool.
Simple in ext/ where one could go like --enable-security-info ....
But yeah, I won't be mad if we decide it's a bit useless for the core
but I think it would be a good "feature" add for PHP6 and perhaps even
a bit of press coverage about php's security, but good press :P
> --
> Stanislav Malyshev, Zend Software Architect
> stas@zend.com http://www.zend.com/
> (408)253-8829 MSN: stas@zend.com
>
--
David Coallier,
Founder & Software Architect,
Agora Production (http://agoraproduction.com)
51.42.06.70.18