Yasuo Ohgaki wrote:
I sooo much don't care. But with the many downsides in mind I'd keep it.
Could you list them up so that I may address issues?
I agree with Rasmus that having 2 parsing modes is problematic.
Other than that, I don't see serious downsides.
If you are curious about this reputation, search CVE for number of PHP LFI
Given the substantial difference between the number of sites running PHP and other languages is it really surprising that it gets the most attention? This is just another 'education' problem rather than ini proliferation one!
The 'Modern Frameworks' who might use it have already removed the problem other ways, so why do they need it? The ones that might benefit from it will never switch it off anyway, so what use is it?
--
Lester Caine - G8HFL
-----------------------------
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk