2008/12/8 Johannes Schlüter <[EMAIL PROTECTED]>: > Hi, > > let's take this to a new thread so it'S not hidden in other discussions: > > On Mon, 2008-12-08 at 16:06 +0100, Hannes Magnusson wrote: >> > I do not think it is necessary for 5.3. It is an alpha release after >> > all and seriously, anyone who plans to move to 5.3.0 and still >> > relies on magic quotes gpc is likely to have more issues as well. >> >> Time to turn it off by default then? > > Getting rid of magic_quotes would be really nice but has a very big > "BUT". > > Many things (I won't call it "applications" or something...) out there > are accidentially more or less safe due to magic_quotes. Many of these > things were written by people with, at most, basic understanding of the > what they are doing and now are running at some random hosting company > on a $9.99/year (no idea what today's prices are) > > When dropping magic_quotes the hosting company can do one of two things: > > a) not update to 5.3 so we either have to maintain 5.2 for some time or > let them have problems > > b) update to 5.3. Doing that means they break many of there customer's > code. Now they could add a default filter to add quotes again, what's > the win? Except that it will break magic_quotes-compatible code and > makes it harder to detect? > > People won't fix the code - the code was "developed" by some web design > company 5 years ago and nobody touches the site anymore and there's no > maintenance contract between the design company and the site owner > anymore... > > The only way I see for getting rid of magic_quotes is with a version > which will require people to touch the code anyways and with a big > "marketing campaign" so I think PHP 6 is a way better time for that even > so I'm really annoyed by it when doing stuff myself... > > Comments and other views are welcome, > johannes
I had a whole diatribe about past experience with upgrading accounting and EPOS systems pre Y2K. I deleted it. In short those that paid attention didn't have a problem. Those that know about it will be dealing with it or have already dealt with it. Those that don't know about it, won't know about it in V5.3, V6.0, V7.0, 8,9,10, enterprise, free-to-all, any-version-number-or-name-which-makes-you-stand-up-and-look. I hope that the majority are in the first group. As I understand it, you developers do NOT have a duty of care to stop us upgrading without first reading the changelogs. But I also understand it is pretty shitty to miss a 1 liner (magic quotes removed) and find everything broken and then to be told RTFM/RTFCL. If this is in V6, then it I would have though that this would be better received than in V5 release. Richard. -- ----- Richard Quadling Zend Certified Engineer : http://zend.com/zce.php?c=ZEND002498&r=213474731 "Standing on the shoulders of some very clever giants!"
