<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-3650259870998252242.post5505166189627692180..comments</id><updated>2010-10-01T13:15:26.777+02:00</updated><category term='dialog'/><category term='parity'/><category term='html5'/><category term='bbcode'/><category term='firebug'/><category term='malware'/><category term='false'/><category term='doctrine'/><category term='events'/><category term='include'/><category term='chrome'/><category term='firefox'/><category term='encryption'/><category term='window'/><category term='e4x'/><category term='grep'/><category term='ede'/><category term='video'/><category term='email'/><category term='xss'/><category term='closures'/><category term='wget'/><category term='training'/><category term='niebezpiecznik'/><category term='tab'/><category term='facebook'/><category term='xml'/><category term='pki'/><category term='propel'/><category term='denied'/><category term='select'/><category term='mysql'/><category term='java'/><category term='multiuser'/><category term='talk'/><category term='webdav'/><category term='security'/><category term='openssl'/><category term='padding'/><category term='diff'/><category term='game'/><category term='oracle'/><category term='rest'/><category term='ui'/><category term='android'/><category term='tripledes'/><category term='escape'/><category term='zend framework'/><category term='flickr'/><category term='html'/><category term='signing'/><category term='tostring'/><category term='datetimeconvert'/><category term='pear'/><category term='hijack'/><category term='tree'/><category term='widget'/><category term='magic quotes'/><category term='cracow'/><category term='json'/><category term='svn'/><category term='google'/><category term='modal'/><category term='php5'/><category term='lint'/><category term='csrf'/><category term='3des'/><category term='obfuscation'/><category term='cryptography'/><category term='javascript'/><category term='cache'/><category term='iframe'/><category term='des'/><category term='eval'/><category term='option'/><category term='load'/><category term='websockets'/><category term='youtube'/><category term='sidejacking'/><category term='tumblr'/><category term='http'/><category term='demo'/><category term='sql injection'/><category term='mssql'/><category term='desede'/><category term='track'/><category term='python'/><category term='plugin'/><category term='analysis'/><category term='overloading'/><category term='owasp'/><category term='new pix'/><category term='clickjacking'/><category term='access'/><category term='everonia'/><category term='jsunpack'/><category term='readonly'/><category term='update'/><category term='share'/><category term='hack'/><category term='key'/><category term='tabs'/><category term='php'/><category term='crockford'/><category term='ajax'/><category term='deployment'/><category term='remote'/><category term='sqli'/><category term='freetds'/><category term='refresh'/><category term='ie'/><category term='clickjack'/><category term='regex'/><category term='jquery'/><category term='turing'/><category term='mdb2'/><category term='clone'/><category term='captcha'/><category term='datepicker'/><category term='hardening'/><category term='utf7'/><category term='upload'/><category term='history'/><category term='log'/><category term='search'/><category term='referrer'/><category term='server'/><category term='phar'/><category term='symfony'/><category term='ftp'/><title type='text'>Comments on the world. according to koto: Hardening PHP: How to securely include remote code...</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://blog.kotowicz.net/feeds/5505166189627692180/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/3650259870998252242/5505166189627692180/comments/default'/><link rel='alternate' type='text/html' href='http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html'/><author><name>Krzysztof Kotowicz</name><uri>https://profiles.google.com/111743409761183951147</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='32' src='//lh4.googleusercontent.com/-ADnDC5o75NA/AAAAAAAAAAI/AAAAAAAAE1w/rnOv95ckHn4/s512-c/photo.jpg'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>2</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-3650259870998252242.post-7108501851034469564</id><published>2010-10-01T13:15:26.777+02:00</published><updated>2010-10-01T13:15:26.777+02:00</updated><title type='text'>@chevrox

Thanks for reporting, I fixed the issue ...</title><content type='html'>@chevrox&lt;br /&gt;&lt;br /&gt;Thanks for reporting, I fixed the issue (although there was no such error on my linux box) in v0.5.3, update using:&lt;br /&gt;&lt;br /&gt;$ sudo pear upgrade kotowicz/pharutil-beta&lt;br /&gt;&lt;br /&gt;For future issues please use http://github.com/koto/phar-util/issues webpage or mail me directly (I will add contact deatils on &amp;#39;about me&amp;#39; page now)</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/3650259870998252242/5505166189627692180/comments/default/7108501851034469564'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/3650259870998252242/5505166189627692180/comments/default/7108501851034469564'/><link rel='alternate' type='text/html' href='http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html?showComment=1285931726777#c7108501851034469564' title=''/><author><name>Krzysztof Kotowicz</name><uri>http://www.blogger.com/profile/11516786094492717236</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html' ref='tag:blogger.com,1999:blog-3650259870998252242.post-5505166189627692180' source='http://www.blogger.com/feeds/3650259870998252242/posts/default/5505166189627692180' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1270688555'/></entry><entry><id>tag:blogger.com,1999:blog-3650259870998252242.post-2123438661706515019</id><published>2010-09-30T20:50:59.914+02:00</published><updated>2010-09-30T20:50:59.914+02:00</updated><title type='text'>Hi:
  I think that the file php-build has a bug bu...</title><content type='html'>Hi:&lt;br /&gt;  I think that the file php-build has a bug but I didn&amp;#39;t know where to fill a request:&lt;br /&gt;&lt;br /&gt;    // buildFromIterator unfortunately sucks and skips nested directories (?)&lt;br /&gt;    foreach ($iterator as $file) {&lt;br /&gt;        echo &amp;quot;adding &amp;quot; . $file . PHP_EOL;&lt;br /&gt;        if ($file-&amp;gt;isFile()) {&lt;br /&gt;            $phar-&amp;gt;addFile($file, str_replace($options[&amp;#39;src&amp;#39;], &amp;#39;&amp;#39;, $file));&lt;br /&gt;        }&lt;br /&gt;        if ($file-&amp;gt;isDir()) {&lt;br /&gt;            // this also doesn&amp;#39;t work :(&lt;br /&gt;            $phar-&amp;gt;addEmptyDir(str_replace($options[&amp;#39;src&amp;#39;], &amp;#39;&amp;#39;, $file));&lt;br /&gt;        }&lt;br /&gt;    }&lt;br /&gt;&lt;br /&gt;This piece of code will crash on a linux system because $file is not taking care about the &amp;#39;.&amp;#39; and the &amp;#39;..&amp;#39; listed in the interator, so as a patch I manage to handle it with &lt;br /&gt;&lt;br /&gt;if(substr($file, -1) === &amp;#39;.&amp;#39;) continue;&lt;br /&gt;&lt;br /&gt;Thanks for this great job.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/3650259870998252242/5505166189627692180/comments/default/2123438661706515019'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/3650259870998252242/5505166189627692180/comments/default/2123438661706515019'/><link rel='alternate' type='text/html' href='http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html?showComment=1285872659914#c2123438661706515019' title=''/><author><name>chervox</name><uri>http://www.blogger.com/profile/00360993299966284076</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.kotowicz.net/2010/08/hardening-php-how-to-securely-include.html' ref='tag:blogger.com,1999:blog-3650259870998252242.post-5505166189627692180' source='http://www.blogger.com/feeds/3650259870998252242/posts/default/5505166189627692180' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1665475137'/></entry></feed>
