Re: [PHP-DEV] HashDoS

2016-09-22 Thread Glenn Eggleton
Is the XML api also affected by hashdos? cheers, glenn On Thursday, 22 September 2016, Jakub Zelenka wrote: > On Thu, Sep 22, 2016 at 8:13 PM, Niklas Keller > wrote: > > > 2016-09-22 20:10 GMT+02:00 Jakub Zelenka >:

Re: [PHP-DEV] HashDoS

2016-09-21 Thread Glenn Eggleton
2016 at 4:05 PM, Tom Worster <f...@thefsb.org> wrote: > > > On 9/21/16 8:37 AM, Rowan Collins wrote: > > > >> On 21 September 2016 13:02:20 BST, Glenn Eggleton <geggl...@gmail.com> > >> wrote: > >> > >>> What if we had some sort of c

Re: [PHP-DEV] HashDoS

2016-09-21 Thread Glenn Eggleton
Hello, What if we had some sort of configuration limit on collision length? Would give most of us a viable way to prevent our apps from being attacked, and yet in the use cases where we require a higher limit we retain the ability to up the limit or disable it completely. Regards, Glenn On Wed,

Re: [PHP-DEV] [RFC Proposal] var keyword deprecation/removal

2016-03-09 Thread Glenn Eggleton
Hi list, I think that removing it in any 7.x would be too soon. We should mark it as future deprecation then remove it at a later date. While I don't come across the use of var too much, it does still exist in code bases that are quite old. On Wed, Mar 9, 2016 at 1:56 PM, Fleshgrinder