Re: [PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Jacob Bednarz
I think it would be good to incitate all the frameworks and projects using Travis CI to add nightly to their testing matrix so as to catch bugs in the upcoming PHP 7 version by testing real code and also so as to have as much real code as possible getting ready for PHP 7. I think this is an exce

Re: [PHP-DEV] Feature request and RFC

2015-02-25 Thread Thomas Gielfeldt
2015-02-24 17:36 GMT+01:00 Benjamin Eberlei : > Hi, > > On Tue, Feb 24, 2015 at 5:17 PM, Thomas Gielfeldt > wrote: > >> Hi internals. >> >> I've made PR proposing a feature request: A new interface Sortable. >> >> https://github.com/php/php-src/pull/1116 >> >> If possible, I would like to create

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Sammy Kaye Powers
I don't know why everyone says the internals list is so scary - you guys are great! :) > I think the function name(s) should indicate that these functions are for getting crypto-secure randomness. I proposed cs_random_bytes() I'm cool with that idea but I also think it should be spelled out like

Re: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread Pierre Joye
On Wed, Feb 25, 2015 at 7:32 PM, François Laupretre wrote: > About #1: if, one day, a majority decides that we absolutely need strict > types, it will be very easy. Just define four additional type hints, > something like 'int!', 'float!', 'string!' 'bool!' or any other syntax. These > types w

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas, On Thu, Feb 26, 2015 at 10:48 AM, Yasuo Ohgaki wrote: > I think you mean I ignored this. Let's discuss it. > > > > They'd need to upload with a matching file type. Instead of any file > > Not sure what you mean by that. phar can read tars, et

RE: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread François Laupretre
Hi Pierre, > De : Pierre Joye [mailto:pierre@gmail.com] > > With the other RFC, which changes the casting modes, I wish everyone > good luck. I may be wrong, can happen ;), but we simply do not know > and will not know before 7.0.0 is out. Good luck to change them again > to "adapt and tweak"

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas and Padraic, On Thu, Feb 26, 2015 at 9:40 AM, Pádraic Brady wrote: > On 25 February 2015 at 23:26, Stanislav Malyshev > wrote: > > else I can say, provided that what I already said - including > > demonstrating trivial workarounds that allow to circumvent this feature > > with extreme e

RE: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread François Laupretre
> De : Anthony Ferrara [mailto:ircmax...@gmail.com] > > Additionally, it presents a problem when it comes to voting. What if a > person wants strict types. And it looks like it's overall going to > pass, but that weak types is winning. What's the best way for them to > vote? No. For the entire prop

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Pierre Joye
On Wed, Feb 25, 2015 at 4:40 PM, Pádraic Brady wrote: > Stanislav, > > On 25 February 2015 at 23:26, Stanislav Malyshev wrote: >> else I can say, provided that what I already said - including >> demonstrating trivial workarounds that allow to circumvent this feature >> with extreme ease - had no

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas, I think you mean I ignored this. Let's discuss it. > They'd need to upload with a matching file type. Instead of any file Not sure what you mean by that. phar can read tars, etc. AFAIK, can't it? Also, phar archive has no requirement of being

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Pierre Joye
hi, On Wed, Feb 25, 2015 at 5:39 PM, Pierre Joye wrote: I totally forgot to mention one thing in all my replies: I love this addition and it is cruelly needed :) I only have doubts about the implementations and the details I explained in my other replies. It is also something that could be add

RE: [PHP-DEV] Design by Contract

2015-02-25 Thread François Laupretre
Hi Yasuo, I just suggest you add the following notice text at the beginning of your RFC : An alternative ‘Design by Contract’ RFC exists (https://wiki.php.net/rfc/dbc). It was started by François Laupretre, is based on annotations, and proposes an alternative syntax to add contract suppor

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Pierre Joye
On Wed, Feb 25, 2015 at 2:40 PM, Leigh wrote: > On modern OpenBSD/FreeBSD/OSX /dev/random and /dev/urandom are both > aliases of /dev/arandom, which is quite literally an inexhaustible > supply of CS random backed by arc4random. On Linux I think you'll be > hard pressed to exhaust /dev/urandom fr

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Pádraic Brady
Stanislav, On 25 February 2015 at 23:26, Stanislav Malyshev wrote: > else I can say, provided that what I already said - including > demonstrating trivial workarounds that allow to circumvent this feature > with extreme ease - had no effect. You keep bringing that up. I keep having to correct yo

RE: [PHP-DEV] [Discussion] Last chance for case-sensitive engine

2015-02-25 Thread François Laupretre
Pierre, > De : Pierre Joye [mailto:pierre@gmail.com] > > > I case we would designed a new language I would rise two hands. > > Changing, syntax in an existent widely used language is an additional pain > > for users. > > Technically it shouldn't be very difficult to remove support for > > case

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Jan, On Thu, Feb 26, 2015 at 8:15 AM, Jan Ehrhardt wrote: > Stanislav Malyshev in php.internals (Wed, 25 Feb 2015 15:00:21 -0800): > >> This is only a minor detail, compared with the other PHP7 changes. > > > >Not that minor actually since you'd have to enumerate all extensions > >used in you

Re: [PHP-DEV][RFC][VOTE] Group Use Declarations

2015-02-25 Thread Philip Sturgeon
On Wed, Feb 25, 2015 at 4:13 PM, Marcio Almada wrote: > Hi, > > The voting for Group Use Declarations is now closed with 39 "yes" and 19 > "no" votes. According to the established 2/3 majority requirement, it > passed. > > https://wiki.php.net/rfc/group_use_declarations#votes > > If you voted "no"

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Jan, On Thu, Feb 26, 2015 at 8:30 AM, Jan Ehrhardt wrote: > Jordi Boggiano in php.internals (Wed, 25 Feb 2015 23:09:40 +): > >On 25/02/2015 22:46, Stanislav Malyshev wrote: > >> 2. I think this RFC provides false sense of security for people that > >> create vulnerable code and lets them

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas, On Thu, Feb 26, 2015 at 8:26 AM, Stanislav Malyshev wrote: > Padraic, I'm not really interested in another prolonged discussion, > especially where my arguments are ignored or misconstrued and then > dismissed. I have explained my opinion, if somebody has questions about > the substance

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Leigh
Might as well mention it because it has been discussed OTR. We've thrown the idea around that we could cater for other sources of random via a PHP extension. (I.e. if someone has a particular hardware RNG they want to use). We're concerned that this may be misused, or even abused as a way of delib

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Anthony Ferrara
Tom On Wed, Feb 25, 2015 at 6:21 PM, Tom Worster wrote: > Hi Leigh, > >>We're still discussing whether a userland (non-kernel userland) >>implementation of arc4random is wise. We need to put some feelers out >>and consult some experts on this, > > I wouldn't. As Thomas Patcek put it, quoting the

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Jan Ehrhardt
Jordi Boggiano in php.internals (Wed, 25 Feb 2015 23:09:40 +): >On 25/02/2015 22:46, Stanislav Malyshev wrote: >> 2. I think this RFC provides false sense of security for people that >> create vulnerable code and lets them think it's OK to have variable >> includes without adequate safety, sinc

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Stanislav Malyshev
Hi! Padraic, I'm not really interested in another prolonged discussion, especially where my arguments are ignored or misconstrued and then dismissed. I have explained my opinion, if somebody has questions about the substance of my arguments or need me to clarify my points, rather than flat-out den

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Pádraic Brady
Hi Jordi, On 25 February 2015 at 23:09, Jordi Boggiano wrote: > On 25/02/2015 22:46, Stanislav Malyshev wrote: >> >> 2. I think this RFC provides false sense of security for people that >> create vulnerable code and lets them think it's OK to have variable >> includes without adequate safety, sin

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Tom Worster
Hi Leigh, >We're still discussing whether a userland (non-kernel userland) >implementation of arc4random is wise. We need to put some feelers out >and consult some experts on this, I wouldn't. As Thomas Patcek put it, quoting the article I linked before: You want to use the kernel's CSPRNG, beca

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Jan Ehrhardt
Stanislav Malyshev in php.internals (Wed, 25 Feb 2015 15:00:21 -0800): >> This is only a minor detail, compared with the other PHP7 changes. > >Not that minor actually since you'd have to enumerate all extensions >used in your app, which can use libraries, which may use other >extensions - like Sma

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Jordi Boggiano
On 25/02/2015 22:46, Stanislav Malyshev wrote: 2. I think this RFC provides false sense of security for people that create vulnerable code and lets them think it's OK to have variable includes without adequate safety, since they are "protected" by these changes. People that are clueless already

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Pádraic Brady
On 25 February 2015 at 23:00, Stanislav Malyshev wrote: > Hi! > >> This is only a minor detail, compared with the other PHP7 changes. > > Not that minor actually since you'd have to enumerate all extensions > used in your app, which can use libraries, which may use other > extensions - like Smarty

[PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas, Thank you for your reply. I understand your view, yet I thought it's better to share your view with all of us. On Thu, Feb 26, 2015 at 7:46 AM, Stanislav Malyshev wrote: > > I saw you voted "no". > > Could you share us the reason behind? > > I think I did, in my past messages to the li

Re: [PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Pádraic Brady
Hi Stanislav, On 25 February 2015 at 22:46, Stanislav Malyshev wrote: > Hi! > >> I saw you voted "no". >> Could you share us the reason behind? > > I think I did, in my past messages to the list, but maybe I was not > clear. I will repeat in short: > > 1. I think this RFC does not provide any sec

Re: [PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Pascal Chevrel
Le 25/02/2015 23:25, Florian Margaine a écrit : Hi, Pascal Chevrel writes: Hi people, I hope this is not too much off topic but I saw today that Travis now supports nightly builds as a possible PHP version, they documented it here: http://docs.travis-ci.com/user/languages/php/#PHP-nightly-bu

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Stanislav Malyshev
Hi! > This is only a minor detail, compared with the other PHP7 changes. Not that minor actually since you'd have to enumerate all extensions used in your app, which can use libraries, which may use other extensions - like Smarty or some other template library - and it may be non-trivial to find

Re: [PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Pierre Joye
On Feb 25, 2015 2:34 PM, "Pádraic Brady" wrote: > > Hi Florian > > On 25 February 2015 at 22:25, Florian Margaine wrote: > > Hi, > > > > Pascal Chevrel writes: > > > >> Hi people, > >> > >> I hope this is not too much off topic but I saw today that Travis now > >> supports nightly builds as a po

[PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Stanislav Malyshev
Hi! > I saw you voted "no". > Could you share us the reason behind? I think I did, in my past messages to the list, but maybe I was not clear. I will repeat in short: 1. I think this RFC does not provide any security improvement, due to extreme ease with which the measures in this RFC can be cir

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Jan Ehrhardt
Yasuo Ohgaki in php.internals (Thu, 26 Feb 2015 07:18:59 +0900): >> If you already have this feature, then you are promoting the RFC the >> wrong way. You are constantly hammering on ini_set() to mitigate the >> effects of the change. That would cause a lot of code changes for many >> frameworks. >

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Leigh
On 25 February 2015 at 20:24, Stanislav Malyshev wrote: > Hi! > >> For example, the number of users that actually need to do something >> better than read from /dev/urandom is small. A user that is concerned > > Good summary read on the topic: http://www.2uo.de/myths-about-urandom/ > TLDR: it's ok

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Leigh
Hey Tom, On 25 February 2015 at 19:39, Tom Worster wrote: > I don't understand the requirement for crypto-secure random integers. > I have never encountered this requirement. [Btw: the proposed patch > implements this function using a loop that's not guaranteed to > terminate in any given amount

[PHP-DEV] Re: [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Stas, On Thu, Feb 26, 2015 at 7:06 AM, Yasuo Ohgaki wrote: > It seems there are misunderstandings about the issue and the protection. > If you would like to vote "no", please read the RFC carefully. > If you find fatal reason to reject this RFC, it is about arbitrarily code > execution > and

Re: [PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Pádraic Brady
Hi Florian On 25 February 2015 at 22:25, Florian Margaine wrote: > Hi, > > Pascal Chevrel writes: > >> Hi people, >> >> I hope this is not too much off topic but I saw today that Travis now >> supports nightly builds as a possible PHP version, they documented it here: >> http://docs.travis-ci.co

Re: [PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Florian Margaine
Hi, Pascal Chevrel writes: > Hi people, > > I hope this is not too much off topic but I saw today that Travis now > supports nightly builds as a possible PHP version, they documented it here: > http://docs.travis-ci.com/user/languages/php/#PHP-nightly-builds > > I think it would be good to incit

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Jan, On Thu, Feb 26, 2015 at 6:55 AM, Jan Ehrhardt wrote: > Yasuo Ohgaki in php.internals (Thu, 26 Feb 2015 06:20:46 +0900): > >I probably don't understand your question. We already have php_value and > >php_admin_value to change INI value in .htaccess (and like). > > > > php_value "zend.scri

[PHP-DEV] Travis support PHP Nightly builds (PHP 7)

2015-02-25 Thread Pascal Chevrel
Hi people, I hope this is not too much off topic but I saw today that Travis now supports nightly builds as a possible PHP version, they documented it here: http://docs.travis-ci.com/user/languages/php/#PHP-nightly-builds I think it would be good to incitate all the frameworks and projects us

[PHP-DEV] [RFC][VOTE] Introduce script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi all, Vote for script only include/require RFC is started. This RFC closes one of the fatal security hole in PHP programs with simple patch. https://wiki.php.net/rfc/script_only_include https://github.com/php/php-src/pull/ Vote ends 2015/3/12 It seems there are misunderstandings about the

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Jan Ehrhardt
Yasuo Ohgaki in php.internals (Thu, 26 Feb 2015 06:20:46 +0900): >I probably don't understand your question. We already have php_value and >php_admin_value to change INI value in .htaccess (and like). > > php_value "zend.script_extensions" ".php .myext" # Works like globals >ini_set() > php_admin_

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Tom Worster
On 2/25/15, 3:24 PM, "Stanislav Malyshev" wrote: >Good summary read on the topic: http://www.2uo.de/myths-about-urandom/ >TLDR: it's ok to use /dev/urandom. Yes! Thanks for the link. Much shorter but with pretty much the same message, I like: http://sockpuppet.org/blog/2014/02/25/safely-generat

Re: [PHP-DEV] Design by Contract

2015-02-25 Thread Yasuo Ohgaki
Hi all, I would like to start [DISCUSSION] for this RFC. RFC may needs update, but these changes can be done during the discussion also. Any comments for staring discussion? P.S. I'll prepare simple "Vote Only" RFC for 2 RFCs. Please feel free to change/improve it. -- Yasuo Ohgaki yohg...@ohga

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Yasuo Ohgaki
Hi Jan, On Thu, Feb 26, 2015 at 12:07 AM, Jan Ehrhardt wrote: > Yasuo Ohgaki in php.internals (Wed, 25 Feb 2015 19:07:05 +0900): > >I understand people do all kinds of things. > >Therefore, I'm allowing > > > >ini_set('zend.script_extension', ''); // Disable protections at all. > > > >It's users

Re: [PHP-DEV][RFC][VOTE] Group Use Declarations

2015-02-25 Thread Marcio Almada
Hi, The voting for Group Use Declarations is now closed with 39 "yes" and 19 "no" votes. According to the established 2/3 majority requirement, it passed. https://wiki.php.net/rfc/group_use_declarations#votes If you voted "no": your feedback is still as important as before, specially in case you

Re: [PHP-DEV][RFC][VOTE] Group Use Declarations

2015-02-25 Thread Marcio Almada
Hi 2015-02-25 8:45 GMT-03:00 Pascal MARTIN, AFUP : > > > We've discussed this RFC with other people of AFUP, and even though there > have been quite a few mails exchanged, I'm sorry to say we didn't reach a > consensus -- and, as such, are neither -1 nor +1. > > Trying to summarize a few points:

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Stanislav Malyshev
Hi! > For example, the number of users that actually need to do something > better than read from /dev/urandom is small. A user that is concerned Good summary read on the topic: http://www.2uo.de/myths-about-urandom/ TLDR: it's ok to use /dev/urandom. -- Stas Malyshev smalys...@gmail.com -- P

Re: [PHP-DEV] Annotations in PHP7

2015-02-25 Thread Larry Garfield
On 2/25/15 5:45 AM, Peter Holák wrote: One thing to consider when annotations are classes is whether using an annotation should make the annotated class depend on the annotation classes it uses. In other words, would a missing annotation class produce an error? It doesn't in Java (at runtime, see

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Anthony Ferrara
Tom, On Wed, Feb 25, 2015 at 2:39 PM, Tom Worster wrote: > I welcome the proposal for an easy-to-use PHP function for obtaining > crypto-secure randomness. I have a number of comments and suggestions. > > I think the function name(s) should indicate that these functions are > for getting crypto-s

Re: [PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Pádraic Brady
Hi Larry, I think we'd be biting off too much to be worth chewing for other character sets. Most uses are going to revolve around characters allowed in URLs. Expanding that, to a degree, perhaps per a additional character list, or character list flag, might not be too far, but things will get inte

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Pádraic Brady
Hi Kevin, On 25 February 2015 at 08:18, Kevin Ingwersen (Ingwie Phoenix) wrote: > Here are my cents to this RFC, as it just keeps popping in in my inbox and > its beginning to be one that I wish I could ignore. > > First, … file extensions? A default Apache configuration and some Nginx > config

[PHP-DEV] [RFC] [DISCUSSION] Reliable user-land CSPRNG

2015-02-25 Thread Tom Worster
I welcome the proposal for an easy-to-use PHP function for obtaining crypto-secure randomness. I have a number of comments and suggestions. I think the function name(s) should indicate that these functions are for getting crypto-secure randomness. I proposed cs_random_bytes() previously (https://w

Re: [PHP-DEV] [Discussion] Last chance for case-sensitive engine

2015-02-25 Thread Pierre Joye
On Wed, Feb 25, 2015 at 10:52 AM, Dmitry Stogov wrote: > Hi Alexander, > > On Tue, Feb 24, 2015 at 10:48 AM, Alexander Lisachenko < > lisachenko...@gmail.com> wrote: > >> Morning! >> >> I want to ask this question one more time before PHP7 feature freeze: can >> we the engine case sensitive from

Re: [PHP-DEV] [Discussion] Last chance for case-sensitive engine

2015-02-25 Thread Dmitry Stogov
Hi Alexander, On Tue, Feb 24, 2015 at 10:48 AM, Alexander Lisachenko < lisachenko...@gmail.com> wrote: > Morning! > > I want to ask this question one more time before PHP7 feature freeze: can > we the engine case sensitive from PHP>=7.0? > > There is a draft for that: https://wiki.php.net/rfc/ca

RE: [PHP-DEV] [Discussion] Last chance for case-sensitive engine

2015-02-25 Thread François Laupretre
Hi Yasuo, I won’t have time to work more on DbC before one month. As I said, I am leaving Saturday moring for 3 weeks, and use the 2 days left to rewrite the coercive STH RFC with Zeev, and work on the corresponding patch with Dmitry. So, feel free to put it to vote. Just reference my one

RE: [PHP-DEV] [Discussion] Last chance for case-sensitive engine

2015-02-25 Thread François Laupretre
Hi Lester, I agree. The only way I imagine possible (maybe Derick can confirm), is adding an optional case-sensitive mode and, then, much later, make it the default. Unlike raising E_DEPRECATED on case-insensitive comparisons, this approach is technically possible. The only probem I see is that

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 7:06 PM, Anthony Ferrara wrote: > Dmitry, > > > But checks are performed not in the caller but in RECV opcode at called > > function. > > And in this function we don't know id it's going to be called only in > strict > > mode or in weak as well. > > Currently, yes. However

Re: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread Lester Caine
On 25/02/15 15:31, Pierre Joye wrote: > With the other RFC, which changes the casting modes, I wish everyone > good luck. I may be wrong, can happen ;), but we simply do not know > and will not know before 7.0.0 is out. Good luck to change them again > to "adapt and tweak", and good luck to the app

Re: [PHP-DEV] [RFC] Anonymous Classes

2015-02-25 Thread Philip Sturgeon
On Tue, Feb 24, 2015 at 2:25 PM, Stanislav Malyshev wrote: > Hi! > >> I like the idea of having anonymous classes, it is very helpful during >> development to just try something out without having the burden of >> creating a new file and a complete class including namespace and use >> declarations

RE: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Zeev Suraski
> -Original Message- > From: Shashank Kumar [mailto:shashankkumar...@gmail.com] > Sent: Wednesday, February 25, 2015 2:54 PM > To: Dmitry Stogov > Cc: Anthony Ferrara; internals@lists.php.net > Subject: Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5 > > On Wed, Feb 25, 2015 a

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Jordi Boggiano
On 25/02/2015 12:30, Dmitry Stogov wrote: anyone may tell, what this will print without running :) main.php a.php = b.php = I am not sure if we really need to focus the discussion on whether edge cases using references are confusing or not. They already are confusing ev

[PHP-DEV] Quick RFC Wiki change

2015-02-25 Thread Trevor Suarez
Hi internals, I was just browsing the RFC wiki page when I noticed a sub-section for PHP 5.7 under the Implemented section[1]. Considering that the PHP 5.7 version RFC was put to a vote and failed[2], I'm wondering why these items are still in this section. Should we move these 5.7 items to the 7

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry, > But checks are performed not in the caller but in RECV opcode at called > function. > And in this function we don't know id it's going to be called only in strict > mode or in weak as well. Currently, yes. However, by the time we enter ZEND_DO_FCALL, we know which function we're going t

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Pierre Joye
On Wed, Feb 25, 2015 at 7:29 AM, Dmitry Stogov wrote: > On Wed, Feb 25, 2015 at 6:09 PM, Anthony Ferrara > wrote: > >> Dmitry, >> >> > The object on the call-site should remain to be an object (if it's not >> > passed by reference), however the called function will receive a string. >> > It works

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 6:47 PM, Anthony Ferrara wrote: > Dmitry, > > > On Wed, Feb 25, 2015 at 10:13 AM, Dmitry Stogov wrote: > > > > > > On Wed, Feb 25, 2015 at 6:03 PM, Anthony Ferrara > > wrote: > >> > >> Dmitry, > >> > >> On Wed, Feb 25, 2015 at 7:19 AM, Dmitry Stogov wrote: > >> > Hi Ant

Re: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 5:23 PM, Niktia Nefedov wrote: > On Wed, 25 Feb 2015 17:54:21 +0400, Dmitry Stogov wrote: > >> The object on the call-site should remain to be an object (if it's not >> passed by reference), however the called function will receive a string. >> It works in PHP-5 and PHP-7

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry, On Wed, Feb 25, 2015 at 10:13 AM, Dmitry Stogov wrote: > > > On Wed, Feb 25, 2015 at 6:03 PM, Anthony Ferrara > wrote: >> >> Dmitry, >> >> On Wed, Feb 25, 2015 at 7:19 AM, Dmitry Stogov wrote: >> > Hi Anthony, >> > >> > Few notes: >> > >> > - first of all, it would be great to split th

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 6:24 PM, Anthony Ferrara wrote: > Dmitry > > On Wed, Feb 25, 2015 at 10:20 AM, Dmitry Stogov wrote: > > > > > > On Wed, Feb 25, 2015 at 6:06 PM, Anthony Ferrara > > wrote: > >> > >> Dmitry: > >> > >> On Wed, Feb 25, 2015 at 7:55 AM, Dmitry Stogov wrote: > >> > On Wed, F

Re: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread Pierre Joye
On Sat, Feb 21, 2015 at 2:47 PM, Zeev Suraski wrote: >> "with two potential 'camps' of developers forming up" >> >> Have you looked at the community lately? That's been happening for a >> decade. One camp likes to engineering everything out using classes and >> libraries. The other keeps using PH

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 6:09 PM, Anthony Ferrara wrote: > Dmitry, > > > The object on the call-site should remain to be an object (if it's not > > passed by reference), however the called function will receive a string. > > It works in PHP-5 and PHP-7. Nothing should be changed. > > > > $ sapi/cl

Re: [PHP-DEV] Coercive Scalar Type Hints RFC

2015-02-25 Thread Niktia Nefedov
On Wed, 25 Feb 2015 17:54:21 +0400, Dmitry Stogov wrote: The object on the call-site should remain to be an object (if it's not passed by reference), however the called function will receive a string. It works in PHP-5 and PHP-7. Nothing should be changed. $ sapi/cli/php -r 'class X {function

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry On Wed, Feb 25, 2015 at 10:20 AM, Dmitry Stogov wrote: > > > On Wed, Feb 25, 2015 at 6:06 PM, Anthony Ferrara > wrote: >> >> Dmitry: >> >> On Wed, Feb 25, 2015 at 7:55 AM, Dmitry Stogov wrote: >> > On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov >> > wrote: >> > >> >> On Wed, 25 Feb 201

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 6:06 PM, Anthony Ferrara wrote: > Dmitry: > > On Wed, Feb 25, 2015 at 7:55 AM, Dmitry Stogov wrote: > > On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov > wrote: > > > >> On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov > wrote: > >> > >> anyone may tell, what this wil

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 6:03 PM, Anthony Ferrara wrote: > Dmitry, > > On Wed, Feb 25, 2015 at 7:19 AM, Dmitry Stogov wrote: > > Hi Anthony, > > > > Few notes: > > > > - first of all, it would be great to split the voting questions: 2/3 - > > implement scalar type hinting + 1/2 - in addition add

Re: [PHP-DEV] [RFC] Exceptions in the engine

2015-02-25 Thread Rowan Collins
Dmitry Stogov wrote on 25/02/2015 14:07: No. The proposal is only about fatal engine errors, like "Fatal Error: Call to undefined function %s()". Instead of script termination they will throw exceptions. fopen() won't be touched at all. It's out of scope of proposal. Hi Dmitry, I was respondi

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Lester Caine
On 25/02/15 12:58, Dmitry Stogov wrote: >> Does that mean when reading or writing code, in addition to checking the >> > signature of a function, >> > I have to check the 'strict_types' setting at the top as well, to >> > understand how that signature behaves? >> > > I think you should check it in

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry, > The object on the call-site should remain to be an object (if it's not > passed by reference), however the called function will receive a string. > It works in PHP-5 and PHP-7. Nothing should be changed. > > $ sapi/cli/php -r 'class X {function __toString(){return "abc";}} $x=new X; > va

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry: On Wed, Feb 25, 2015 at 7:55 AM, Dmitry Stogov wrote: > On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov wrote: > >> On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov wrote: >> >> anyone may tell, what this will print without running :) >>> >>> main.php >>> >>> >> declare(stric

Re: [PHP-DEV] [RFC] Script only include/require

2015-02-25 Thread Jan Ehrhardt
Yasuo Ohgaki in php.internals (Wed, 25 Feb 2015 19:07:05 +0900): >I understand people do all kinds of things. >Therefore, I'm allowing > >ini_set('zend.script_extension', ''); // Disable protections at all. > >It's users choice if they use systematically secure configuration or not. >However, provi

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Anthony Ferrara
Dmitry, On Wed, Feb 25, 2015 at 7:19 AM, Dmitry Stogov wrote: > Hi Anthony, > > Few notes: > > - first of all, it would be great to split the voting questions: 2/3 - > implement scalar type hinting + 1/2 - in addition add strict type hinting as I've mentioned this a few times, but I disagree wit

Re: [PHP-DEV] [RFC] Exceptions in the engine

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 4:19 PM, Rowan Collins wrote: > Tony Marston wrote on 21/02/2015 10:08: > >> ""Nikita Nefedov"" wrote in message news:op.xuco5eutc9evq2@nikita-pc... >> >>> >>> On Fri, 20 Feb 2015 12:39:33 +0300, Tony Marston < >>> tonymars...@hotmail.com> wrote: >>> I disagree.

Re: [PHP-DEV] [RFC] Exceptions in the engine

2015-02-25 Thread Lester Caine
On 25/02/15 13:19, Rowan Collins wrote: >>> Tony, first of all - this still breaks BC, because exception is being >>> thrown in a place where it used not to be... >> >> I disagree. The following function calls would not throw exceptions >>fopen(...); >>fwrite(...); >>fclose(...); >> >>

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 3:15 PM, Niktia Nefedov wrote: > On Wed, 25 Feb 2015 16:55:57 +0400, Dmitry Stogov > wrote: > > > > On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov > wrote: > >> On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov >> wrote: >> >> anyone may tell, what this will print wi

Re: [PHP-DEV] Re: [RFC] Exceptions in the engine

2015-02-25 Thread Pavel Kouřil
On Fri, Feb 20, 2015 at 8:01 AM, Yasuo Ohgaki wrote: > Hi all, > > On Fri, Feb 20, 2015 at 12:14 AM, Trevor Suarez wrote: > >> I think that naming the new parent exception something like "Throwable" or >> "Catchable" (as Nikita previously suggested) would be a bit more concise in >> meaning than

Re: [PHP-DEV] [RFC] Exceptions in the engine

2015-02-25 Thread Rowan Collins
Tony Marston wrote on 21/02/2015 10:08: ""Nikita Nefedov"" wrote in message news:op.xuco5eutc9evq2@nikita-pc... On Fri, 20 Feb 2015 12:39:33 +0300, Tony Marston wrote: I disagree. Exceptions were originally invented to solve the semipredicate problem which only exists with procedural func

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Niktia Nefedov
On Wed, 25 Feb 2015 16:55:57 +0400, Dmitry Stogov wrote: On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov wrote: On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov wrote: anyone may tell, what this will print without running :) main.php a.php = b.php = Thank. Dm

Re: [PHP-DEV] The Game Theory of Scalar Type Hint Voting

2015-02-25 Thread Dennis Birkholz
Hi Lester, Am 25.02.2015 um 12:48 schrieb Lester Caine: > On 25/02/15 11:23, Dennis Birkholz wrote: >> Or you could create a three-way vote, both proposals together need 2/3 >> majority over no-votes and the proposals that gets more than the other >> is chosen. > > Even that simplifies things per

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 3:54 PM, Shashank Kumar wrote: > On Wed, Feb 25, 2015 at 4:30 AM, Dmitry Stogov wrote: > >> anyone may tell, what this will print without running :) >> >> main.php >> >> > declare(strict_types=1) >> include "a.php"; >> include "b.php"; >> var_dump(foo("5")); >> ?

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
On Wed, Feb 25, 2015 at 2:42 PM, Niktia Nefedov wrote: > On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov wrote: > > anyone may tell, what this will print without running :) >> >> main.php >> >> > declare(strict_types=1) >> include "a.php"; >> include "b.php"; >> var_dump(foo("5")); >

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Shashank Kumar
On Wed, Feb 25, 2015 at 4:30 AM, Dmitry Stogov wrote: > anyone may tell, what this will print without running :) > > main.php > > declare(strict_types=1) > include "a.php"; > include "b.php"; > var_dump(foo("5")); > ?> > > a.php > = > declare(strict_types=0) > function foo(string $

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Niktia Nefedov
On Wed, 25 Feb 2015 15:42:11 +0400, Niktia Nefedov wrote: On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov wrote: anyone may tell, what this will print without running :) main.php a.php = b.php = Thank. Dmitry. Hi Dmitry, This will error out because $a in the

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Niktia Nefedov
On Wed, 25 Feb 2015 16:30:32 +0400, Dmitry Stogov wrote: anyone may tell, what this will print without running :) main.php a.php = b.php = Thank. Dmitry. Hi Dmitry, This will error out because $a in the scope of `foo` will be coerced to int type when passed to bar

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Florian Margaine
Hi, Le 25 févr. 2015 13:31, "Dmitry Stogov" a écrit : > > anyone may tell, what this will print without running :) > > main.php > > declare(strict_types=1) > include "a.php"; > include "b.php"; > var_dump(foo("5")); > ?> > > a.php > = > declare(strict_types=0) > function foo(string

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
anyone may tell, what this will print without running :) main.php a.php = b.php = Thank. Dmitry. On Wed, Feb 25, 2015 at 3:19 PM, Dmitry Stogov wrote: > Hi Anthony, > > Few notes: > > - first of all, it would be great to split the voting questions: 2/3 - > implement scala

Re: [PHP-DEV] Re: [RFC] Exceptions in the engine

2015-02-25 Thread Xinchen Hui
Hey: On Tue, Feb 24, 2015 at 2:27 AM, Marc Bennewitz wrote: > Hi Dimitry, > > Am 19.02.2015 um 16:13 schrieb Dmitry Stogov: >> >> Hi Nikita, >> >> I refactored your implementation: https://github.com/php/php-src/pull/1095 >> >> I introduced a class hierarchy to minimize effect on existing code. >

Re: [PHP-DEV] Re: [RFC-Discuss] Scalar Type Declarations v0.5

2015-02-25 Thread Dmitry Stogov
Hi Anthony, Few notes: - first of all, it would be great to split the voting questions: 2/3 - implement scalar type hinting + 1/2 - in addition add strict type hinting as you propose. I think, the concept of run-time declare() switch is not designed well. It just affects VM and JITed code in nega

Re: [PHP-DEV] The Game Theory of Scalar Type Hint Voting

2015-02-25 Thread Lester Caine
On 25/02/15 11:23, Dennis Birkholz wrote: > Or you could create a three-way vote, both proposals together need 2/3 > majority over no-votes and the proposals that gets more than the other > is chosen. Even that simplifies things perhaps a little too much? The questions as I see them are ... Scal

  1   2   >