Guide to PHP Security

Quicksearch

Calendar

Comments

Mark van der Velden about Beware of the default Apache 2 config for PHP

Wed, 01.09.2010 02:15

Interesting behavior, I've tri ed it with several extension b ack then and it only worked on bogus file extensions. [...]

Ilia Alshanetsky about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 15:17

Actually with .txt the PHP cod e gets executed, one of the re asons I found the problem out since the test server ha [...]

James Baugh about PHP Excel Extension 0.8.6

Tue, 31.08.2010 13:03

I re-compiled (I did change my PHP version and compiled with --enable-debug) and the probl em went away. Not sure w [...]

Henning Kockerbeck about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 06:24

Sorry, looks like the filter o n this blog doesn't like Apach e directives with brackets tha t look like HTML tags

[...]

Henning Kockerbeck about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 06:21

Ubuntu (at least the current 1 0.04 LTS) uses a variant which in my opinion is a better sol ution than switching fro [...]

Mark van der Velden about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 05:36

This is not entirely correct, it depends on the bogus extens ion. If you append .txt to a P HP file, .txt get's prec [...]

AllenJB about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 02:29

See: - http://httpd.apache.or g/docs/2.2/mod/mod_mime.html#a ddhandler - http://httpd.apac he.org/docs/2.2/mod/mod_ [...]

Gustavo Lopes about Beware of the default Apache 2 config for PHP

Mon, 30.08.2010 23:32

I mean let's say you have name d test.php. You use MultiViews and URLs without extensions, relying on content negot [...]

Ilia Alshanetsky about PHP Excel Extension 0.8.6

Mon, 30.08.2010 21:56

Can try to compile php with -- enable-debug and see if the er ror happens still? I've tr ied a few times with dif [...]

Ilia Alshanetsky about Beware of the default Apache 2 config for PHP

Mon, 30.08.2010 21:40

Well, it is not about wrong or right, If you want a.php.txt to be treated as a PHP script then, by all means use A [...]

Thursday, September 14. 2006

Posted by Ilia Alshanetsky in PHP, Talks

Comments (3)
Trackbacks (0)

PHP|Works Slides

The slides from my two talks at PHP|Works are now available online for download in PDF and Flash formats, they can be found here:
http://ilia.ws/talks/. You'll need to scroll to the bottom of the page to find the download links.

Overall I think the talks went very well, and I hope that all the people who have attended found the material covered interesting and/or informative. I won't presume to assume the talks were fun, but c'mon what do you expect from a technical talk

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

Thanks!

#1 Taras (Homepage) on 2006-09-14 21:24 (Reply)

In Cache for Ca$h on page 7, write_cache() is called through register_shutdown_function(). I was thinking about what happens when user aborts the connection and if ignore_user_about() is not necessary. After all, it isn't necessary because a PHP script is not aborted until anything is written to the output and there's nothing written in the script due to ob_start(). But if the code would be changed to output intermediate results (e.g. by setting 2nd parameter of ob_start()), ignore_user_abort() would be necessary.

#2 Jakub Vrána (Homepage) on 2006-09-15 04:07 (Reply)

I think that for aborted connections it would be safer NOT to cache the page and wait for the next user who is going to wait for the entire page to be loaded.

#2.1 Ilia Alshanetsky (Homepage) on 2006-09-15 11:13 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Standard emoticons like :-) and ;-) are converted to images. E-Mail addresses will not be displayed and will only be used for E-Mail notifications
	Remember Information? Subscribe to this entry