> 1. Remove register_globals completely
>
Amen! +1

> 2. Remove magic_quotes_*
>
Hallelujiah! +1

> 3. Add input filter extension which will include a mechanism for
>    application developers to very easily turn it off which would swap
>    the raw GPC arrays back in case the site had it turned on by default.
>
Eh... +0

> 4. Include an opcode cache by default.  A lot of work has gone into
>    pecl/apc recently, but I am not hung up on which one goes in.
>
Okay... +0

> 5. Remove safe_mode and focus on open_basedir
>
+1 on dropping safe_mode, and here's a thought for open_basedir.

I was thinking about a comment made in another thread... how about
open_basedir_child(bool).  When enabled, only files at or below the
directory in which the current script is executed from may be opened.  There
may be some SAPIs where this is problematic (since we may not know what
directory the file is opened from reliably), but it's worth looking into.

> 6. Remove some stuff that has been marked deprecated since PHP 3/4
>
Praise non-denominational-diety! +1

Though my definition of "remove" would actually be "migrate to siberia".
Whole modules where appropriate.   "deprecation" collections where not.

> A couple of others that we could consider, but I don't actually think
> wins us much apart from academic purity (which I have never been all
> that keen on) are:
>
> 7. Make identifiers case-sensitive
>
Or perhaps optionally case sensitive?  I dunno, I've made my peace with PHP
being (mostly) case-insensitive.

> 8. Remove various function aliases
>
Many of these fall under #6 honestly.  I can think of a few that can fall by
the wayside.


#9... No....
must...resist....four-letter-token....can-of-worms....mmmmggmhghmhhmmhgmhmgm
mmm
* otherbird sneaks up behind Sara and clamps her mouth shut before the genie
is released.

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to