[TYPO3-project-4-3] alt_intro.php

Martin Kutschker masi-no at spam-typo3.org
Fri Nov 6 14:10:51 CET 2009


Steffen Kamper schrieb:
> Hi,
> 
> alt_intro.php is a sys extension 'about_modules'. It's a bit strange as
> it's callable even if the sys_ext is deinstalled.

All files can be accesses (and exceuted) regardless, if the extension is installed or not.

To avoid such problems "binaries" in extensions should be forbidden. If all extension code were
called from a dispatcher of the Core such problems wouldn't arise.

For modules and CLIs there has been done a step in the right direction. Unfortunately with plain PHP
includes instead of objects and interfaces.

Masi


More information about the TYPO3-project-4-3 mailing list