search

kraken-php / framework

Asynchronous & Fault-tolerant PHP Framework for Distributed Applications.
http://kraken-php.com
MIT License
1.12k stars 59 forks source link

Non-issue : Changed include method for external PHP files. #41

Closed optiman closed 8 years ago

optiman commented 8 years ago

Using data streams in require/include statements requires allow_url_include and allow_url_fopen directives to be enabled, which is considered as a potential security vulnerability. Also base64 encoding/decoding adds extra overhead. Eval in this case performs more than 2x faster.