Hi,

2012/4/9 Arvids Godjuks <arvids.godj...@gmail.com>:
> And you get same issues that existed with magic quotes, register variables,
> safe mode and other optional stuff that was required to run application when
> set specificaly and it would break if something set differently. PHP just
> got rid of it and you want to introduce a new optional feature that will
> change how PHP behaves.

Magic Quotes is broken by design.
Register Globals may work but erroneous.
Safe Mode was great for fail safe, but it was misunderstood.
Therefore, they are removed.

All of these are security related changes why not for
mandatory  embed mode?

There were full of embedded PHP pages 10 years ago.
Only template pages require embedded PHP script now.

There is no compatibility issue for current code.
New code that adopts non-embed scripting will enjoy
better security than now.

Embed w/o option would be the last existing PHP feature
that other language programmers may call "PHP is insecure
than my language" IMO

Regards,

--
Yasuo Ohgaki
yohg...@ohgaki.net

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to