On Fri, 12 Aug 2005 20:19:04 +0200 (CEST)
derick@php.net (Derick Rethans) wrote:
> On Fri, 12 Aug 2005, George Schlossnagle wrote:
>
> > > 3. Add input filter extension which will include a mechanism
> > > for application developers to very easily turn it off which
> > > would swap the raw GPC arrays back in case the site had it
> > > turned on by default.
> >
> > That seems a bit scary, and almost as if it would defeat the
> > purpose. I'm all for an input filter extension, but it should
> > be one that can't be easily neutered by (potentially malicious)
> > applications.
>
> I wrote up the following spec for this extension:
> http://files.derickrethans.nl/filter_extension.html
It lools globally good for the principles. Details can be changed
during implementation/experimentations phases.
I only disagree with E_NOTICE. All these validations should be
silent. Derick, as far as I remember, you have some doubts about
that too. As you may noticed before, I have some problems with
noisy functions in general :)
Regards,
--Pierre