Re: [PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/Zend/zend_execute_API.c trunk/Zend/zend_execute_API.c

2012-02-08 Thread Stas Malyshev
Hi! We're in violent agreement. I don't think it's the right approach at all — the right fix is to either fall back on ITIMER_REAL or come up with some other approach on OS X — but I'm trying to come up with a stopgap for 5.4.0 to make sure the test is XFAILed where we already know it fails as

Re: [PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/Zend/zend_execute_API.c trunk/Zend/zend_execute_API.c

2012-02-08 Thread Ferenc Kovacs
On Wed, Feb 8, 2012 at 10:57 AM, Stas Malyshev smalys...@sugarcrm.comwrote: Hi! We're in violent agreement. I don't think it's the right approach at all — the right fix is to either fall back on ITIMER_REAL or come up with some other approach on OS X — but I'm trying to come up with a

[PHP-DEV] Is it possible to create a php-general.zh maillist?

2012-02-08 Thread Laruence
Rasums: there are more and more php developers in china, and we all speak chinese, so could we create a maillist for chinese(php-general.zh), there are already general.es and bg. if yes, I will be volunteer to spread it, and also I will spend a lot of time to answer the question

[PHP-DEV] Re: Is it possible to create a php-general.zh maillist?

2012-02-08 Thread Laruence
Hi: after a deep thought, I think it is not suitable to create a mail list for chinese. there is a very strict examination in chinese against web content. and because the mailist will be public, so if someone sent some kind of `illegal` content to maillist, may cause the whole maillist

Re: [PHP-DEV] When is PHP6 Beta going to be available ;)

2012-02-08 Thread Ondřej Surý
BTW php.ini-production and php.ini-development contains this line :) ; E_ALL             - All errors and warnings (includes E_STRICT as of PHP 6.0.0) -- Ondřej Surý ond...@sury.org -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] When is PHP6 Beta going to be available ;)

2012-02-08 Thread Stas Malyshev
Hi! BTW php.ini-production and php.ini-development contains this line :) ; E_ALL - All errors and warnings (includes E_STRICT as of PHP 6.0.0) Thanks for noticing, fixed. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227 -- PHP

[PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Ondřej Surý
This is very wrong to recommend: ; NOTE: If you are using the subdirectory option for storing session files [...] ;          find /path/to/sessions -cmin +24 | xargs rm because it is prone to '\n' attack. You can see the security considerations of GNU find. Much better would be: find

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Christopher Jones
On 02/08/2012 03:35 PM, Ondřej Surý wrote: This is very wrong to recommend: ; NOTE: If you are using the subdirectory option for storing session files [...] ; find /path/to/sessions -cmin +24 | xargs rm because it is prone to '\n' attack. You can see the security considerations of

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Reindl Harald
Am 09.02.2012 00:35, schrieb Ondřej Surý: Much better would be: find /path/to/sessions -cmin +24 -delete or at least find /path/to/sessions -cmin +24 -execdir rm {} \; (GNU find) The most error-prone way is something we cooked up in Debian: find /var/lib/php5/ -depth -mindepth 1

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Ondřej Surý
On Thu, Feb 9, 2012 at 00:40, Christopher Jones christopher.jo...@oracle.com wrote: Can you log a bug for this at https://bugs.php.net/ ? Done: https://bugs.php.net/bug.php?id=61020 On Thu, Feb 9, 2012 at 00:43, Reindl Harald h.rei...@thelounge.net wrote: the main question is why here cmin is