well said Johannes!
Johannes Schlueter wrote:
<posted & mailed>
Jared Williams wrote:
my point is that on internals@ we usually discuss developing php and not developing *with* php -
Poor practices and insecure code should never go unchallenged anywhere, unless its cleared marked as such.
As Thies wrote: This list is for discussing the development _of_ PHP. Therefore it's important to have samples which are showing the problem not the whole stuff around it - such a thing won't be readable anymore and the readers would spend much more time for understanding the code than for discussing the problem. Everybody on this list should have enough knowledge about checking input data and these things. The only thing one might do is to add a disclaimer stating that the code might be unsafe but some dude might still ignore this warning and the others get bored so it won't change anything.
I hope we can get back to the point, johannes
-- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php