[PHP-DEV] Re: what is the rule of merging fix to release branch?

2012-06-16 Thread Stas Malyshev
Hi! > there comes some bug of a already fixed issue (PHP5.4.4) > > the fix(#61998) is here > https://github.com/php/php-src/commit/90e23107a2acba1fd53b7e799372eb9f24194a56 > > but seems this fix is not merged into 5.4.4 when it was released? > > so, what is the rule? :) The f

[PHP-DEV] what is the rule of merging fix to release branch?

2012-06-16 Thread Laruence
Hi: there comes some bug of a already fixed issue (PHP5.4.4) the fix(#61998) is here https://github.com/php/php-src/commit/90e23107a2acba1fd53b7e799372eb9f24194a56 but seems this fix is not merged into 5.4.4 when it was released? so, what is the rule? :) thanks -- Laruence  X

Re: [PHP-DEV] Subdomain Set Up

2012-06-16 Thread Ronald Chmara
On Sat, Jun 16, 2012 at 10:28 AM, Johannes Schlüter wrote: > On Sat, 2012-06-16 at 14:34 +0200, Gustavo Lopes wrote: >> On Sat, 16 Jun 2012 14:17:04 +0200, Paul Dragoonis >> wrote: >> > I attempted to get (and failed) some attention on my request that I >> > posted to php-webmaster mailing list,

Re: [PHP-DEV] Subdomain Set Up

2012-06-16 Thread Johannes Schlüter
On Sat, 2012-06-16 at 14:34 +0200, Gustavo Lopes wrote: > On Sat, 16 Jun 2012 14:17:04 +0200, Paul Dragoonis > wrote: > > > I attempted to get (and failed) some attention on my request that I > > posted to php-webmaster mailing list, so I'm escalating it here: > > > > http://news.php.net/php.we

Re: [PHP-DEV] Adding a simple API for secure password hashing?

2012-06-16 Thread Ángel González
On 16/06/12 15:39, Pierre Joye wrote: > However the point here is not the implementation but the APIs. > > To be honest I am not a big fan of providing such an API in the core > as no matter the default implementation, it will become obsolete soon > or later. And changing the default brings its lot

Re: [PHP-DEV] Subdomain Set Up

2012-06-16 Thread Paul Dragoonis
Okay, Thanks for the reply. On Sat, Jun 16, 2012 at 1:34 PM, Gustavo Lopes wrote: > On Sat, 16 Jun 2012 14:17:04 +0200, Paul Dragoonis > wrote: > >> I attempted to get (and failed) some attention on my request that I >> posted to php-webmaster mailing list, so I'm escalating it here: >> >> http

Re: [PHP-DEV] Adding a simple API for secure password hashing?

2012-06-16 Thread Pierre Joye
hi Anthony, Adding Alex to the loop as his insight will be unvaluable in this thread. On Sat, Jun 16, 2012 at 2:41 PM, Anthony Ferrara wrote: >> This userland library already solves all the issues you outlined with >> bcrypt: http://www.openwall.com/phpass/ > > That library is not without its i

Re: [PHP-DEV] Adding a simple API for secure password hashing?

2012-06-16 Thread Anthony Ferrara
Herman, > This userland library already solves all the issues you outlined with > bcrypt: http://www.openwall.com/phpass/ That library is not without its issues. For example, if you ask for a portable hash, it gives you a custom algorithm instead of bcrypt. That's because the library is php4 comp

Re: [PHP-DEV] Subdomain Set Up

2012-06-16 Thread Gustavo Lopes
On Sat, 16 Jun 2012 14:17:04 +0200, Paul Dragoonis wrote: I attempted to get (and failed) some attention on my request that I posted to php-webmaster mailing list, so I'm escalating it here: http://news.php.net/php.webmaster/13696 I agree that this request should not be granted. I don't s

[PHP-DEV] Subdomain Set Up

2012-06-16 Thread Paul Dragoonis
Hi Internals, I attempted to get (and failed) some attention on my request that I posted to php-webmaster mailing list, so I'm escalating it here: http://news.php.net/php.webmaster/13696 Thanks, Paul Dragoonis. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http

Re: [PHP-DEV] Adding a simple API for secure password hashing?

2012-06-16 Thread Pierre Joye
hi! hi! On Fri, Jun 15, 2012 at 6:23 PM, Herman Radtke wrote: > This userland library already solves all the issues you outlined with > bcrypt: http://www.openwall.com/phpass/ > > The API is very easy to use, has been around for a while and has a > number of detailed articles that explain how to

Re: [PHP-DEV] [PATCH - PR] Disable ATTR_EMULATE_PREPARES by default for PDO_Mysql

2012-06-16 Thread Ulf Wendel
Am 15.06.2012 18:28, schrieb Christopher Jones: On 06/15/2012 08:34 AM, Ulf Wendel wrote: As long as client-side escaping is done properly, there is no practical difference between the [client vs server -prepare] approaches. The big problem with this line of reasoning is that the client must