2008年11月21日星期五

Re: [fw-core] Zend_Loader::_securityCheck...

This method, as it name says, checks for invalid characters in the file being loaded.

Characters like ?%&#() can not be present in a file name, otherwise an exception will be thrown. The advantage is pretty clear in terms of security.

--
________________________
Mauricio Cuenca


On Fri, Nov 21, 2008 at 12:48 PM, James Dempster <letssurf@gmail.com> wrote:
Hi Dev's

Can someone explain to me what _securityCheck in Zend_Loader does, why and to what advantage.

I feel like I missing the point on this one.

Thanks,
/James



没有评论: