setting the include path...security risk?

[sneakyimp]

i'm install in AND sdk that features this line

set_include_path('/home/www/web4/web/sdk' . DIRECTORY_SEPARATOR . 'lib' . PATH_SEPARATOR . get_include_path());

does adding an additional path to the include path of PHP present any additional security risk?

[bpat1434]

NOt really.... you can read a reason or two of why it's done over at Matt Zandstra's page: [url]http://www.getinstance.com/[/url]

*Interesting.... stupid filter cut out his site....

[sneakyimp]

so what would be there in place of the asterisks? a swear word perhaps? would love to check it out.

[bpat1434]

no... the site is called:
getinstance and for some odd reason, the word filter caught it mixed with the www. portion.... not sure why.

[sneakyimp]

he's got no search for his online writing. do you mean in the book?

[bpat1434]

nope..... here's the direct link:
[url=http://getinstance.com/blog/index.php?id=12]Death to the Dot[/url]

[sneakyimp]

Dude, he used the word 'ossify'. cool.

thanks!

[bpat1434]

No problem...