Re: [PHP-DEV] CVS Account Request From: Sascha Schumann (sascha <email protected>)
Date: 11/15/00

On Wed, 15 Nov 2000, Zeev Suraski wrote:

> At 23:08 15/11/2000, Sterling Hughes wrote:
>
> >Also I think we should be a little more careful of who we give cvs access
> >to on the code root. Right now I could probably get a fake e-mail and
> >such from yahoo and obtain a nice ol' cvs account, from which I could then
> >(if I was bad) commit some harmful code, which since it would not be a
> >part of standard/ or main/ would not be given due attention (especially if
> >it was a nice harmful one line bit) and then hurt users who use it.
>
> I can't tell you how I'm happy I am you say that. I was beginning to think
> I was being paranoid, but I think that considering the popularity of PHP,
> someone joining the dev team as a silent 'trojan horse' isn't unlikely at all.

    We have a source code versioning system for exactly that
    reason.

    A single person cannot screw up our CVS tree. If he does
    something extraordinarily stupid, pull his CVS account and
    revert his changes.

    - Sascha 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>