Re: [PHP-DEV] zend_ini_parser.c fails to create in latest PHP6

2008-03-30 Thread Cristian Rodriguez
2008/3/30, Graham Frank [EMAIL PROTECTED]: Hello, I was trying to compile the latest PHP6 dev release and I keep getting the following error: gcc: /root/php6.0-200803301630/Zend/zend_ini_parser.c: No such file or directory gcc: no input files make: ***

Re: [PHP-DEV] Re: Backporting to 5_3

2008-03-30 Thread Cristian Rodriguez
2008/3/30, Edward Z. Yang [EMAIL PROTECTED]: list($b) = 'asdf'; // $b is NULL yep, that does not work, and should IMHO emit the warning I mentioned in a previuos email... ;) -- If debugging is the process of removing bugs, then programming must be the process of putting them in. – Edsger

Re: [PHP-DEV] Re: Backporting to 5_3

2008-03-28 Thread Cristian Rodriguez
2008/3/28, Hannes Magnusson [EMAIL PROTECTED]: I agree. Any functionality removal, no matter how wtf it might be, shouldn't be merged. If we could however throw E_DEPRECATED there, that would be great. I guess an E_WARNING is more appropiate Warning : list() only works on numerical

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-03-27 Thread Cristian Rodriguez
2008/3/27, Richard Lynch [EMAIL PROTECTED]: As I understand the situation, if you can get ALL the sysadmins of the world to update their [bleep] timezonedb frequently, PHP can drop the internal timezonedb. OS vendors release timezone updates frecuently, there is no need for such bundled tz

Re: [PHP-DEV] Backporting to 5_3

2008-03-26 Thread Cristian Rodriguez
2008/3/26, Stanislav Malyshev [EMAIL PROTECTED]: - Removed support for continue and break operators with non-constant operands. (Dmitry) I'd wait for 6 with this. May break some scripts. I dont think it will break more a piece of code that doesnt really work. ;) -- If debugging is

Re: [PHP-DEV] CMake SoC Proposal

2008-03-20 Thread Cristian Rodriguez
2008/3/19, Scott MacVicar [EMAIL PROTECTED]: Another alternative would be to simply bundle CMake with PHP, Nope, Cmake is available in almost all distributions and in the case some of them dont have it yet, they will because sooner or later will need to integrate KDE4. Please dont bundle more

Re: [PHP-DEV] Dropping ze1_compatibility_mode (PHP 5.3)

2008-03-11 Thread Cristian Rodriguez
2008/3/10, Felipe Pena [EMAIL PROTECTED]: Hello! I've backported the Dmitry's patch (HEAD) for to drop zend.ze1_compatibility_mode in PHP_5_3 branch. Would be interesting remove it in 5_3? :) +1 , because this feature does not work, so there is no point to keep it anymore. -- If

Re: [PHP-DEV] Error messages for wrong coding

2008-02-19 Thread Cristian Rodriguez
2008/2/19, Felipe Pena [EMAIL PROTECTED]: Em Ter, 2008-02-19 às 01:25 -0300, Cristian Rodriguez escreveu: you need to handle offset of booleans too.. Oops! Thanks. There is a similar case with unset() an offset of booleans and integers. ?php $foo = true: /* should throw a fatal error

Re: [PHP-DEV] PHP mail() header patch for SafeMode

2008-02-18 Thread Cristian Rodriguez
2008/2/18, Paul van Brouwershaven [EMAIL PROTECTED]: Enabling it from the php.ini would also be a good option, the main point is to get some help with tracking the spam source in a shared hosted environment. IIRC Ilia had a better patch for this, I dont know why it hasnt been merged into PHP

Re: [PHP-DEV] Error messages for wrong coding

2008-02-18 Thread Cristian Rodriguez
2008/2/19, Cristian Rodriguez [EMAIL PROTECTED]: 2008/2/19, Felipe Pena [EMAIL PROTECTED]: Proposed: - Shows error message (Fatal error, as happens with objects) for integer and float variables. http://felipe.ath.cx/diff/bug39915.diff +1 , fatal error for consistency. you need

Re: [PHP-DEV] get_magic_quotes_gpc, get-magic-quotes-runtime in head, get a final decision

2008-02-06 Thread Cristian Rodriguez
2008/2/6, Derick Rethans [EMAIL PROTECTED]: I don't care that much, but I think it would matter if the functions just are there and return false (so -1). for set_magic_quotes_runtime(), if true is passed, it should still throw a fatal error, if false is passed it should not (or actually 1

Re: [PHP-DEV] get_magic_quotes_gpc, get-magic-quotes-runtime in head, get a final decision

2008-02-05 Thread Cristian Rodriguez
2008/2/5, Pierre Joye [EMAIL PROTECTED]: Hi, It seems that there is voice +1: remove them (as it is now in HEAD) Remove them , they are of no use. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] json_encode() bug

2008-02-01 Thread Cristian Rodriguez
2008/1/25, Stanislav Malyshev [EMAIL PROTECTED]: Now this is an easy fix but would lead to bad strings silently converted to empty strings. The question is - should we have an error there? If so, which one - E_WARNING, E_NOTICE? I'm for E_WARNING. Yes , E_WARNING is the right thing to have

Re: [PHP-DEV] [ZEND-ENGINE-CVS] cvs: ZendEngine2(PHP_5_3) / zend_API.c zend_API.h php-src/ext/standard type.c

2008-02-01 Thread Cristian Rodriguez
2008/2/1, Marcus Boerger [EMAIL PROTECTED]: - Fix callable/static mess, the following will now all result in a E_STRICT . binding a dynamic function as a static callback . static call of a dynamic function . is_callable() on a static binding to a dynamic function Does not

Re: [PHP-DEV] Re: PDO 2: Request for Comments

2008-01-29 Thread Cristian Rodriguez
2008/1/29, Cristian Rodriguez [EMAIL PROTECTED]: If this idea succeeds, you have lost one potential PDO2 , I meant, potential PDO2 contributor ;) So, are PHP core developers crazy enough to be willing to sign this stuff ? ;-) -- http://www.cristianrodriguez.net -- PHP Internals - PHP

Re: [PHP-DEV] Re: PDO 2: Request for Comments

2008-01-29 Thread Cristian Rodriguez
2008/1/28, Derick Rethans [EMAIL PROTECTED]: I'm totally against having a CLA on any part of PHP. Amen ! If some oorporation wants to make profit from PHP I think they shouldnt try to impose their rules, but follow the project's ones. If this idea succeeds, you have lost one potential PDO2 ,

Re: [PHP-DEV] why we must get rid of unicode.semantics switch ASAP

2008-01-21 Thread Cristian Rodriguez
2008/1/21, Antony Dovgal [EMAIL PROTECTED]: 6) we need to remove the switch ASAP Yes :) I urge you to do this, the introduction of this setting is probably the worst design mistake in PHP history after safe_mode and register_globals . Please withdrawn this insanity before it is too late, if

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-01-10 Thread Cristian Rodriguez
2008/1/10, Pierre [EMAIL PROTECTED]: Besides the issues listed by Derick, there is two problems with these choices (distro making design changes to upstream software). Please don't add the timezone to the list of troubles. The vast mayority of PHP users obtain it via their OS vendor, isnt

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-01-10 Thread Cristian Rodriguez
2008/1/10, Rasmus Lerdorf [EMAIL PROTECTED]: Making this an option for the distros is something we pretty much have to do. Yes, or otherwise distros will simple implement their own options. ;-) And yes, I know it makes life harder for people writing portable apps, but that's just the way it

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-01-09 Thread Cristian Rodriguez
2008/1/9, Joe Orton [EMAIL PROTECTED]: Hi folks. It's a bit of a maintenance headache for distributions when packages include their own copy of the timezone database, since this needs to be updated frequently. +1000 :-D -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-01-09 Thread Cristian Rodriguez
2008/1/9, Derick Rethans [EMAIL PROTECTED]: Why do you need this? It is simple, even releasing an update for a particular extension, trigger the whole manteniance and QA in distributions, and it unneccesary work , when the system tz is used you have QA and mantain just one component, the

Re: [PHP-DEV] [PATCH] date/timelib: use system timezone database

2008-01-09 Thread Cristian Rodriguez
2008/1/9, Ilia Alshanetsky [EMAIL PROTECTED]: The reason we do not use the system database is because it is inconsistent and likely is updated less frequently then the one included with PHP. please consider this patch as an alternative for us !! in anycase, you will probably find this patch

Re: [PHP-DEV] type hinting

2008-01-06 Thread Cristian Rodriguez
2008/1/4, Jani Taskinen [EMAIL PROTECTED]: As I'm +1 for OPTIONAL scalar-type hinting. me too +1 as long as : ?php function foo(int $a) {} foo('5'); ? Raises an error, and is rejected because is not a valid integer, otherwise -1 -- http://www.kissofjudas.net/ -- PHP Internals - PHP

Re: [PHP-DEV] type hinting

2008-01-06 Thread Cristian Rodriguez
2008/1/5, Alain Williams [EMAIL PROTECTED]: 1 and 1 should both be acceptable to type hint 'int'. No way, 1 is an string, not an integer. -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Internals read-only

2007-12-13 Thread Cristian Rodriguez
remember it is OPEN source yeah, start doing something useful then.. -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Garbage collector patch

2007-12-03 Thread Cristian Rodriguez
2007/12/3, Ilia Alshanetsky [EMAIL PROTECTED]: I think the patch does have a value, yes, it does, what worries me is the introduction of yet another non-sense ini setting that modified the very engine behaviuor.. I think we all agree that there are way too many of those do we ? . My

Re: [PHP-DEV] [PATCH] Optional scalar type hinting

2007-11-18 Thread Cristian Rodriguez
2007/11/18, Derick Rethans [EMAIL PROTECTED]: I am actually thinking that it might be a good thing to add more and more. I know my quick hack isn't the best implementation though. Yes and it is an alternative and not a mandatory thing to use.. as long as : ?php function foo(int $num) {

Re: [PHP-DEV] Bring back call-time pass-by-reference

2007-11-17 Thread Cristian Rodriguez
2007/11/17, Karoly Negyesi [EMAIL PROTECTED]: There are things you can't without call time pass-by-reference, huh ? are you seriuos ? care to show some proof of your statements ? -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit:

Re: [PHP-DEV] Re: Question about superglobals

2007-11-17 Thread Cristian Rodriguez
2007/11/17, Rasmus Lerdorf [EMAIL PROTECTED]: Trust me, you will grumble a lot more at that. I agree, This is usually not a problem when you are the only person that looks at a very small amount of code, but later when app gets bigger it becomes and unmanteniable mess and I dont want the

Re: [PHP-DEV] [PATCH] Optional scalar type hinting

2007-11-16 Thread Cristian Rodriguez
2007/11/15, Sam Barrow [EMAIL PROTECTED]: I found a patch by Derick online to allow for scalar type hinting, and made it work with the newest snapshot of PHP 5.3. IIRC Hannes had a patch to implement this the right way, but unfortunately it has not been merged. . Hopefully he can publish an

Re: [PHP-DEV] Preliminary PHP taint support available

2007-11-08 Thread Cristian Rodriguez
2007/11/3, Wietse Venema [EMAIL PROTECTED]: OK, I have updated the apache2 module SAPI, a The CGI sapi. using this tarball ftp://ftp.porcupine.org/pub/php/php-5.2.3-taint-20071103.tar.gz does not compile /home/cristian/php5.2.3-tainted/php-5.2.3-taint-20071103/sapi/cgi/cgi_main.c: In function

Re: [PHP-DEV] conf.d support within PHP 5.2 core ?

2007-11-07 Thread Cristian Rodriguez
2007/11/7, Sriram Natarajan [EMAIL PROTECTED]: Hi Will you guys consider adding support for 'Include' file / directory support (like 'conf.d' in Apache HTTPd) so that extensions can be defined within a separate file rather than editing a single 'php.ini' ? I understand that some Linux

Re: [PHP-DEV] Safe mode being removed in PHP6?

2007-11-05 Thread Cristian Rodriguez
2007/11/5, Mark Krenz [EMAIL PROTECTED]: Unless there is some other way in PHP of restricting where you can run programs from (can't find any), Why PHP needs to do that ? isnt that part of OS level security ? this is going to become a major problem. This is going to **solve** a major

Re: [PHP-DEV] My musings on problems I've had with the PHP community

2007-10-15 Thread Cristian Rodriguez
2007/10/15, Antony Dovgal [EMAIL PROTECTED]: Thank you? Rarely, as the year advances, people is getting more and more stressed and is certainly not fun to deal with the reports. Also some people tend to think that their bug reports have to be reviewed now (I mean NOW!!!), unfortunately,

Re: [PHP-DEV] Reference cycle collector patch

2007-10-08 Thread Cristian Rodriguez
2007/10/8, David Wang [EMAIL PROTECTED]: Hey all, Now that macros for manipulating refcount and is_ref have been implemented, I'm ready to submit patches for the GC. I know you all have been waiting for this for a long time ☺. Good, I will test you patches as soon I have time to. P.S.

Re: [PHP-DEV] substr/array_slice in []

2007-10-03 Thread Cristian Rodriguez
2007/10/1, Antony Dovgal [EMAIL PROTECTED]: Yeah, too Perl-ish for me. =) I dont see the need of implementing this either. -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: Bug#442250: [PHP-DEV] CVE-2007-4840

2007-09-19 Thread Cristian Rodriguez
On 9/18/07, Pierre Habouzit [EMAIL PROTECTED] wrote: tag 442250 + wontfix thanks see http://sourceware.org/bugzilla/show_bug.cgi?id=5043 -- http://www.kissofjudas.net/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] PHP 5.3 Suggested Feature List

2007-09-10 Thread Cristian Rodriguez
On 9/9/07, Ilia Alshanetsky [EMAIL PROTECTED] wrote: 12) Merge the GCC 4 -fvisibility patch That patch is a very good idea, but it does not work there are symbols that are no lomger exported on libxml extension , and although everything compiles, I ended with a broken PHP. --

Re: [PHP-DEV] Patch for macros for tracking refcount and is_ref

2007-09-10 Thread Cristian Rodriguez
On 9/10/07, Marcus Boerger [EMAIL PROTECTED] wrote: And please no more magic switches that lead to broken code. that's what worries me, I dont get why people wants to introduce yet another switch to disable to garbage collector ( that will lead to different/broken behaviuor) I think there is

Re: FW: [PHP-DEV] Patch for macros for tracking refcount and is_ref

2007-09-09 Thread Cristian Rodriguez
On 9/8/07, Rasmus Lerdorf [EMAIL PROTECTED] wrote: And yes, if it turns out to be 10% slower, a lot of sites are going to want to run without it. Sad, I see you have lost the notion about who are the vast mayority of your users. Facebook or any top site that requires extreme performance

Re: [PHP-DEV] Patch for macros for tracking refcount and is_ref

2007-09-08 Thread Cristian Rodriguez
On 9/7/07, Andi Gutmans [EMAIL PROTECTED] wrote: Let's not run before we walk. The GC already walks. There's still testing and review and some stabilizing period we should be doing if it is disabled by default it is unlikely that people will test it with real life code even more with in you

Re: [PHP-DEV] Patch for macros for tracking refcount and is_ref

2007-09-07 Thread Cristian Rodriguez
On 9/7/07, Derick Rethans [EMAIL PROTECTED] wrote: But you might want to wonder if that's not a good thing? Without the prefix there will be no indication for third party extensions that they might be doing something that's not going to work nicely with the new GC anymore. I'd prefer it to

Re: [PHP-DEV] What should be in 5.3?

2007-08-29 Thread Cristian Rodriguez
On 8/29/07, Rasmus Lerdorf [EMAIL PROTECTED] wrote: What sort of script did you save a lot of memory on? It takes some very specific code for you to see noticable savings with this. I used very specific code otherwise there is no way to test if the particular enhacement work ;) I also used

Re: Re: [PHP-DEV] What should be in 5.3?

2007-08-28 Thread Cristian Rodriguez
On 8/27/07, Andi Gutmans [EMAIL PROTECTED] wrote: I think we're still far away from a working garbage collector which is production quality. Im sure it has bugs, but last time I tested the circular repository it was working really fine and the save of memory was really big ;-) --

Re: [PHP-DEV] Safe mode being removed in PHP6?

2007-08-27 Thread Cristian Rodriguez
On 8/26/07, Mark Krenz [EMAIL PROTECTED] wrote: No, this is the wrong way to approach the problem. No, this is the right way, language level security does not replace OS level security. I'm bringing it up because its something that needs to be fixed in PHP. No, fixing this issue in PHP

Re: [PHP-DEV] Safe mode being removed in PHP6?

2007-08-26 Thread Cristian Rodriguez
On 8/26/07, Mark Krenz [EMAIL PROTECTED] wrote: So what is the plan for increasing the security of PHP rather than decreasing it? The plan is probably increasing the security of PHP, and removing safe_mode is an step to do that, false sense of security is worst than no security at all,

Re: [PHP-DEV] [PATCH] bracketed namespace, unset import, removal of namespace blah;

2007-08-22 Thread Cristian Rodriguez
On 8/21/07, Gregory Beaver [EMAIL PROTECTED] wrote: Hi again, The attached patch: 1) adds unset import syntax for declaring a namespace to have local import scope (it does NOT affect variable scope or the global class/function table) huh ? o_O unset import ? that's really weird. -- PHP

Re: [PHP-DEV] [Fwd: [PHP-CVS] cvs: php-src /ext/standard formatted_print.c]

2007-08-14 Thread Cristian Rodriguez
On 8/14/07, Antony Dovgal [EMAIL PROTECTED] wrote: This patch breaks PEAR phar install on 64bit. From what I can see in the source code, it compares data in the phar with the result of sprintf(%u..), which is different on 32bit and 64bit because of this patch. Either phar should be

Re: [PHP-DEV] Re: [ZEND-ENGINE-CVS] cvs: ZendEngine2(PHP_5_2) / zend_language_parser.y

2007-08-13 Thread Cristian Rodriguez
On 8/13/07, Stanislav Malyshev [EMAIL PROTECTED] wrote: Was there something wrong with the patch or what? Yes, it was major syntax change in minor version. A Major bugfix maybe ( yes, it was clearly a bug/misfeature) -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe,

Re: [PHP-DEV] Renaming namespaces to packages

2007-08-10 Thread Cristian Rodriguez
On 8/10/07, Marc Gear [EMAIL PROTECTED] wrote: You're absolutly right. Except for a little thing, those are not namespaces, but something more similar to packages. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] buildconf hell

2007-07-19 Thread Cristian Rodriguez
On 7/19/07, Richard Lynch [EMAIL PROTECTED] wrote: Kind of a PITA... No problems here with automake-1.10 , autoconf-2.61 , libtool-1.5.22, bison-2.3. the only oldie we had to keep is flex, as PHP buildsystem wont support newer flex versions. -- PHP Internals - PHP Runtime Development Mailing

Re: [PHP-DEV] Always enable mail() function

2007-07-10 Thread Cristian Rodriguez
On 7/10/07, Johannes Schlüter [EMAIL PROTECTED] wrote: Hi, recently I had the problem that we disable the mail() function if configure can't find the sendmail binary. Is there any real reason for this? I suspect there is no real reason, I have always wondered why is like that. I can image a

Re: [PHP-DEV] RIP PHP 4?

2007-07-09 Thread Cristian Rodriguez
On 7/9/07, Pierre [EMAIL PROTECTED] wrote: That's the ideal world. Unfortunately yes. They should really not use it anymore but they can and they will. No matter what we do. Right. Some Linux distributors will certainly take care of php5 for an even longer period. Yes, about 6 or 7

Re: [PHP-DEV] What is the use of unicode.semantics in PHP 6?

2007-07-06 Thread Cristian Rodriguez
On 7/6/07, Johannes Schlüter [EMAIL PROTECTED] wrote: which will just produce way more problems to hosters and developers of software for PHP 6. yes :-( .. So if unicode.semantics cannot be set at runtime with ini_set() or at least per-dir is a complete non-sense to have it, as the vast

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php-src /ext/standard basic_functions.c streamsfuncs.c streamsfuncs.h /ext/standard/tests/file include_userstream_001.phpt include_userstream_002.phpt /main main.c php

2007-07-03 Thread Cristian Rodriguez
On 7/3/07, sean finney [EMAIL PROTECTED] wrote: hrm.. then this could potentially be a problem for 3rd party packagers such as debian or redhat. well.. I can say is not a problem at least for openSUSE, as we dont use the (IMHO) wrong way of rebuilding extensions based in the PHP API number

Re: [PHP-DEV] toString() and Object #ID

2007-06-29 Thread Cristian Rodriguez
On 6/29/07, Lars Schultz [EMAIL PROTECTED] wrote: Hi there I just tried to switch from 5.1 to 5.2.3 and got thrown off right away by: Object of class MyObject could not be converted to string I googled a bit and also read any Messages in the internals list but couldn't find a decisive answer

Re: [PHP-DEV] [RFC] SPL PCRE as always enabled in core

2007-06-24 Thread Cristian Rodriguez
On 6/6/07, Marcus Boerger [EMAIL PROTECTED] wrote: Also we have no control over mbstring's license because the license holder refuses to change mbstring library to PHP License. why he has to ? the library is not derivated work of PHP, is a plain non-sense to ask other people libraries or work

Re: [PHP-DEV] What is the use of unicode.semantics in PHP 6?

2007-06-14 Thread Cristian Rodriguez
On 6/14/07, Jani Taskinen [EMAIL PROTECTED] wrote: I mean, if PHP 6 is about unicode, why upgrade to PHP 6 and disable it? I think if unicode.semantics remains PHP_INI_SYSTEM it is useless as most users ( people that runs in shared hosting servers) will simple not be able to turn it on, as

Re: [PHP-DEV] Still having lstat trouble

2007-05-25 Thread Cristian Rodriguez
2007/5/23, Arnold Daniels [EMAIL PROTECTED]: Expected: link link differ I get the expected result. with apache 2.2.3 and fastcgi in both 5.2.2 and current -dev , /tmp is mounted as a separate directory with noatime on a reiserfs filesystem. -- PHP Internals - PHP Runtime

Re: [PHP-DEV] PHP Unicode extension in PHP6

2007-05-24 Thread Cristian Rodriguez
2007/5/22, Andrei Zmievski [EMAIL PROTECTED]: Nobody is breaking your code. Yes, it does break code, unicode.semantics is ZEND_INI_SYSTEM, hence I cannot even turn it off with htaccess. You are free to use unicode.semantics or turn it off. No, I cant. redistributable applications (most

Re: [PHP-DEV] PHP Unicode extension in PHP6

2007-05-22 Thread Cristian Rodriguez
2007/5/22, Andrei Zmievski [EMAIL PROTECTED]: Right, it's available in 5.2.1. What's the problem? the problem is exactly that, it is backward incompatible, and PHP 5 is available in less than 20% of the hosts out there.. you can imagine that hosts running 5.2.1 are practically unexistant.

Re: [PHP-DEV] Dismantling the lies...

2007-05-21 Thread Cristian Rodriguez
2007/5/21, Stanislav Malyshev [EMAIL PROTECTED]: at openSUSE, we also have a patch for this issue since a few weeks, as a vendor unfortunately we have to take care of things that people here dont want to fix... http://www.flyspray.org/patches/MOPB-01-abicompatible.patch.bz2 Did you

Re: [PHP-DEV] Dismantling the lies...

2007-05-21 Thread Cristian Rodriguez
2007/5/21, Stanislav Malyshev [EMAIL PROTECTED]: I'm moe worried about the performance - the vast mayority of users will be happy with a more secure system and will like accept a 0.0.0.0.0.0.0.0.0.1% slowdown in case it is slow.. I sometimes wonder what it is real target of PHP, the masses

Re: [PHP-DEV] potential solution to user streams + allow_url_include=off

2007-05-19 Thread Cristian Rodriguez
2007/5/18, Stanislav Malyshev [EMAIL PROTECTED]: Sane hosters do not rely on general-purpose language to provide security, they use OS and hardware designed for exactly that purpose. ;) unfortunately hosters has to equilibrate security vs/usability for their customers.. so disaloowing 100%

Re: [PHP-DEV] potential solution to user streams + allow_url_include=off

2007-05-18 Thread Cristian Rodriguez
2007/5/18, Greg Beaver [EMAIL PROTECTED]: ?php include $_GET['dumb']; ? What about permanently removing this (mis) feature ?? , Im yet to hear any valid reason or example to continue to permit this remote include thingy, all examples I have seen are bogus and broken.. does anyone really

Re: [PHP-DEV] potential solution to user streams + allow_url_include=off

2007-05-18 Thread Cristian Rodriguez
2007/5/18, Greg Beaver [EMAIL PROTECTED]: Hi, I think I have a solution that would allow user streams in PHP 6 and still satisfy paranoid hosters. s/paranoid/sane/g as it is still possible through fsockopen() and other methods to access the outside world. with a tiny :) difference,

Re: [PHP-DEV] PHP 6 Preview

2007-05-17 Thread Cristian Rodriguez
2007/5/17, Steph Fox [EMAIL PROTECTED]: You still need to beat the Perl 6 release folks ;) What PHP6 needs is **not** repeating the same old mistakes over and over again : 1. It should be developed without pressure, with quality being more important than schedule, or you expect the first