Re: [PHP-DEV] Re: [RFC][DISCUSSION] Match expression v2

2020-06-07 Thread Peter Stalman
On Fri, Jun 5, 2020 at 3:10 PM Ilija Tovilo wrote: > > Hi internals > > > I'd like to announce the match expression v2 RFC: > > https://wiki.php.net/rfc/match_expression_v2 > > Small reminder: Two weeks have passed since I announced the match v2 > RFC with little new discussion. I'll leave it open

Re: [PHP-DEV] [RFC] Shorter attribute syntax

2020-06-07 Thread Theodore Brown
Hi Rowan, On Sun, June 7, 2020 at 5:32 PM Rowan Tommins wrote: > On 07/06/2020 19:37, Theodore Brown wrote: > > Yes, I agree that there's a judgment call to make. Out of curiosity, > > given these shortcomings of the double-angle-bracket syntax, do you > > think there are any objective reasons t

Re: [PHP-DEV] Session default settings (use_strict_mode)

2020-06-07 Thread Claude Pache
> Le 7 juin 2020 à 22:15, AllenJB a écrit : > > Are there any other session (security) related settings that should be > tightened by default? (cookie_samesite?) Yes, of course: * session.cookie_httponly should be "1" by default. * session.cookie_samesite should be "Lax" by default. * Ideal

Re: [PHP-DEV] [RFC] Shorter attribute syntax

2020-06-07 Thread Rowan Tommins
On 07/06/2020 19:37, Theodore Brown wrote: If `<> )>>` means something like `new Foo( new Bar )`, then I can imagine it being useful for `<> )>>` to mean `new Foo( [new Bar, new Baz] )`. That would actually be more convenient than the double-at version, where you'd have to write `@@Foo( [@@Bar, @

[PHP-DEV] Session default settings (use_strict_mode)

2020-06-07 Thread AllenJB
Hi all, While writing an answer to someone regarding session security, I noticed that session.use_strict_mode is disabled by default, despite it being "mandatory for session security" (according to the description in the manual - https://www.php.net/manual/en/session.configuration.php#ini.ses

Re: [PHP-DEV] [RFC] Shorter attribute syntax

2020-06-07 Thread Theodore Brown
Hi Rowan, On Sat, June 6, 2020 at 7:06 AM Rowan Tommins wrote: > The `::` token in the parser is called `T_PAAMAYIM_NEKUDOTAYIM`, and > personally I find `T_SL` and `T_SR` just as cryptic and irrelevant. The most > common place I see those token names is when accidentally running code > with

Re: [PHP-DEV] [VOTE] Ensure correct signatures of magic methods

2020-06-07 Thread Gabriel Caruso
On Wed, 3 Jun 2020 at 23:11, Gabriel Caruso wrote: > On Wed, 3 Jun 2020 at 12:32, Nikita Popov wrote: > >> On Sun, May 31, 2020 at 11:20 PM Gabriel Caruso < >> carusogabrie...@gmail.com> wrote: >> >>> On Sun, 31 May 2020 at 15:57, Nikita Popov wrote: >>> On Fri, May 29, 2020 at 6:45 PM Gab

Re: [PHP-DEV] Refactoring run-tests.php

2020-06-07 Thread Derick Rethans
On Sun, 7 Jun 2020, Max Semenik wrote: > On Fri, Jun 5, 2020 at 8:04 PM Nikita Popov wrote: > > > Happy to accept run-tests refactorings in general (there is a lot of > > global state to eradicate!), but please keep it single-file. We > > definitely need it single-file for distribution purpose

Re: [PHP-DEV] [RFC] Deprecations for PHP 8.0

2020-06-07 Thread Kalle Sommer Nielsen
Den søn. 7. jun. 2020 kl. 12.18 skrev Deleu : > > What if Nikita changes the RFC to target PHP 8.1 but proceed with voting > now? If voting passes, the RFC will be pending implementation and the > "news" will start to spread. Brandt will write about it in his blog, Reddit > will have a post about i

Re: [PHP-DEV] [RFC] Deprecations for PHP 8.0

2020-06-07 Thread Deleu
What if Nikita changes the RFC to target PHP 8.1 but proceed with voting now? If voting passes, the RFC will be pending implementation and the "news" will start to spread. Brandt will write about it in his blog, Reddit will have a post about it, etc. and the community will start to spread the infor