Re: [PHP-XML-DEV] XML Security?

[email protected] (Christian Stocker) Thu, 30 Oct 2003 09:22:31 +0100
Newsgroups php.xml.dev
Message-ID <[email protected]>

On 10/30/03 9:12 AM, Alexandru COSTIN wrote:

>>> compiled the right way (with the right extensions) from the beginning.
>>
>> Sure... but why should we also require libxsl? We have enough 
>> dependencies already. We also had these discussions before, please 
>> stop here. Also, hwo many people are really using XSL anyway for their 
>> normal virtual hosted websites?
> 
>     The reason people don't use XSL for their shared servers is that  
> they CAN'T. Same applies for (DOM)XML (or PostgreSQL).
>     I will stop the thread here, but you should understand that most PHP 
> programmers are not C gurus like you guys are - and most of them does 
> not know what "./configure" is. We have lots of clients (thousands) - 
> PHP programmers - and they have real difficulties changing the php.ini 
> settings, and probably it's a clear fact that PHP is mostly used by 
> entry level programmers.
> 
>     Thinking like "they will recompile the PHP by themselves" is surely 
> refreshing for the PHP5 build process, but it's not OK for us as this 
> means that PHP5 will not be an XML ready platform by default.
>     Looking at the php.general group, you will probably see that people 
> are asking more and more for XML

I don't know, how SuSE/RedHat handles the issue, but on debian, it's a 
matter of

apt-get install php4-domxml

to get domxml support in php4 (if you took php4 also from apt-get and 
didn't compile it, but if you did compile it by yourself, you're anyway 
on another level)

The same goes for Windows. Editing one line in php.ini shouldn't be a 
big deal, as all the needed libraries come with the windows download.

You'd better talk to the distributors to include xsl/xml support, than 
to us. And about shared hosts: Either they just forgot it and will add 
it, if enough people ask for it, or they have a policy not to add too 
much xml support (memory issues for example). So the latter would just 
disable it again ;)

Anyway, ext/xsl will certainly not be enabled by default in the future 
and I'll stop here as well with this discussion.

chregu


> 
>             Alexandru
> 
>>
>> regards,
>> Derick
>>
> 
> 

-- 
christian stocker | Bitflux GmbH | schoeneggstrasse 5 | ch-8004 zurich
phone +41 1 240 56 70 | mobile +41 76 561 88 60  | fax +41 1 240 56 71
http://www.bitflux.ch  |  [email protected]  |  gnupg-keyid 0x5CE1DECB