Edit report at https://bugs.php.net/bug.php?id=54564&edit=1

 ID:                 54564
 Updated by:         s...@php.net
 Reported by:        tyra3l at gmail dot com
 Summary:            extension_dir should be used for loading
                     zend_extensions
 Status:             Open
 Type:               Feature/Change Request
 Package:            Scripting Engine problem
 PHP Version:        5.3.6
 Block user comment: N
 Private report:     N

 New Comment:

I think loading extensions through relative path opens a way to all kinds of 
dangerous behavior and may have problematic security implications - like ones 
described here: http://arstechnica.com/information-technology/2010/08/new-
windows-dll-security-flaw-everything-old-is-new-again/. I'm not sure also why 
it 
is necessary - why can't PHP extension be installed in extension dir and run 
from 
there? If one needs multiple ones, multiple php.ini files can always be used.


Previous Comments:
------------------------------------------------------------------------
[2011-04-18 23:05:25] tyra3l at gmail dot com

Description:
------------
I've brought this topic on the internals
http://marc.info/?l=php-internals&m=130314285822279&w=2
and I think that it would be useful and more consistent, if this could be 
changed, 
so one could easily load both "normal" and zend extensions without the need to 
use 
absolute paths.


Test script:
---------------
php -n -d zend_extension=xdebug.so -r ''

Actual result:
--------------
Failed loading xdebug.so:  xdebug.so: cannot open shared object file: No such 
file 
or directory


------------------------------------------------------------------------



-- 
Edit this bug report at https://bugs.php.net/bug.php?id=54564&edit=1

Reply via email to