Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Stas Malyshev
Hi! > "The salt parameter, if provided, will be used in place of an > auto-generated salt." This is setting someone up for failure by > letting them put in something weak, you should be forced to get an > auto-generated salt. If this is for unit testing then it should be > explicitly stated. This

Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Anthony Ferrara
Scott, On Wed, Sep 12, 2012 at 12:57 PM, Scott MacVicar wrote: > Concerns about the RFC after talking with someone (Alok) on our security > team at work. > > "There is no requirement for them to be cryptographically secure. " > What stops the salt from being cryptographically secure? I think it

Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Adam Jon Richardson
On Wed, Sep 12, 2012 at 12:57 PM, Scott MacVicar wrote: > "There is no requirement for them to be cryptographically secure. " > What stops the salt from being cryptographically secure? I think it should be > a goal or we should state what parts aren't cryptographically secure, is it > the random

Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Scott MacVicar
Concerns about the RFC after talking with someone (Alok) on our security team at work. "There is no requirement for them to be cryptographically secure. " What stops the salt from being cryptographically secure? I think it should be a goal or we should state what parts aren't cryptographically s

Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Anthony Ferrara
All, I have added the tests and ensured that everything seems pretty clean. I have opened a Pull Request for this item as I would like to get more eyes on it (especially since it touches crypt()). Please review the PR and comment away. https://github.com/php/php-src/pull/191/files Once it looks

Re: [PHP-DEV] [VOTE] Add simplified password hashing API

2012-09-12 Thread Anthony Ferrara
Hello all, I've closed the vote and it's been accepted with a vote total of 19:0, unanimous. I've moved the RFC into Accepted. I'm going to add the remaining tests, and then move it into master later. As for the PECL extension route, I'll work on splitting it into a PECl extension for 5.3/5.4 at

Re: [PHP-DEV] PHP build-in HTTP server and the HEAD method

2012-09-12 Thread Ivan Enderlin @ Hoa
On 12/09/12 11:20, Sebastian Krebs wrote: Hi, Hi, As far as I can see everything works as expected: Because HEAD-requests should not send any content, you don't get any. Yup, as Damien said. Thank you. -- Ivan Enderlin Developer of Hoa http://hoa.42/ or http://hoa-project.net/ PhD. studen

Re: [PHP-DEV] PHP build-in HTTP server and the HEAD method

2012-09-12 Thread Ivan Enderlin @ Hoa
On 12/09/12 11:15, Damien Tournoud wrote: On Wed, Sep 12, 2012 at 10:54 AM, Ivan Enderlin @ Hoa wrote: Hello, It is probably me but it seems like the build-in HTTP server does not well support the HEAD method. Here is my following test case. First, the foo.php file: By definition, a HEAD

Re: [PHP-DEV] PHP build-in HTTP server and the HEAD method

2012-09-12 Thread Sebastian Krebs
Hi, As far as I can see everything works as expected: Because HEAD-requests should not send any content, you don't get any. Regards, Sebastian 2012/9/12 Ivan Enderlin @ Hoa > Hello, > > It is probably me but it seems like the build-in HTTP server does not well > support the HEAD method. Here i

Re: [PHP-DEV] [VOTE] ::class feature to resolve namespaced class names to scalars

2012-09-12 Thread Anatoliy Belsky
Hi Ralph, I've tested the feature/class_name_scalar in your repo on Windows. Both TS and NTS build and pass the test. Regards Anatoliy Am Di, 11.09.2012, 16:39 schrieb Ralph Schindler: > Hi internals! > > The ::class resolution proposal had significant discussion in April and > I've updated the

Re: [PHP-DEV] PHP build-in HTTP server and the HEAD method

2012-09-12 Thread Damien Tournoud
On Wed, Sep 12, 2012 at 10:54 AM, Ivan Enderlin @ Hoa wrote: > Hello, > > It is probably me but it seems like the build-in HTTP server does not well > support the HEAD method. Here is my following test case. First, the foo.php > file: > > >var_dump($_SERVER['REQUEST_METHOD']); By definiti

[PHP-DEV] PHP build-in HTTP server and the HEAD method

2012-09-12 Thread Ivan Enderlin @ Hoa
Hello, It is probably me but it seems like the build-in HTTP server does not well support the HEAD method. Here is my following test case. First, the foo.php file: /dev/null 2>&1 & $ # Test with POST. $ curl -v -X POST 127.0.0.1: * About to connect() to 127.0.0.1 port (

Re: [PHP-DEV] How to publish extesion on pecl.php.net?

2012-09-12 Thread Pierre Joye
hi, On Wed, Sep 12, 2012 at 9:34 AM, event2game wrote: > Hello, > > I have written an extension using C language, > > I wrote an email to pecl-...@lists.php.net according to "Publishing in PECL > Requirement", > but the spam prevention measure blocked me , I replied confirmation email > both i

[PHP-DEV] How to publish extesion on pecl.php.net?

2012-09-12 Thread event2game
Hello, I have written an extension using C language, I wrote an email to pecl-...@lists.php.net according to "Publishing in PECL Requirement", but the spam prevention measure blocked me , I replied confirmation email both in text format and html format email with the code given to me, and I a