Re: [PHP-DEV] Magic getter bug tickled by Moodle

On 01/30/2015 11:13 PM, Michael Wallner wrote: > > On 31 Jan 2015 06:04, "Rasmus Lerdorf" > wrote: >> >> There is something weird going on with PHP7 and the moodle_page class >> and all its magic methods. It dies with a: >> >> /var/www/moodle/blocks/navigation/block_nav

Re: [PHP-DEV] Magic getter bug tickled by Moodle

On 31 Jan 2015 06:04, "Rasmus Lerdorf" wrote: > > There is something weird going on with PHP7 and the moodle_page class > and all its magic methods. It dies with a: > > /var/www/moodle/blocks/navigation/block_navigation.php(223) : Notice - > Undefined property: moodle_page::$navigation > /var/www/

Re: [PHP-DEV] [RFC] Fix "foreach" behavior

Hi, Nikita got an idea about stopping changing of array/object internal pointers even in forech by reference. I've added an additional RFC section: https://wiki.php.net/rfc/php7_foreach#additional_behavoir_change Trivial implementation on top of the main patch: https://gist.github.com/dstogov/6

[PHP-DEV] Magic getter bug tickled by Moodle

There is something weird going on with PHP7 and the moodle_page class and all its magic methods. It dies with a: /var/www/moodle/blocks/navigation/block_navigation.php(223) : Notice - Undefined property: moodle_page::$navigation /var/www/moodle/blocks/navigation/block_navigation.php(223) : Fatal e

[PHP-DEV] [RFC][DISCUSSION] ReflectionParameter::getClassName()

This RFC adds a new method to ReflectionParameter to allow easy access to a class name in a type hint, avoiding the need to actually load the class and use `get_class()` or `::class`. https://wiki.php.net/rfc/reflectionparameter-getclassname Cheers. -- PHP Internals - PHP Runtime Development Ma

[PHP-DEV] Session: More strict session data management

Hi all, Current session module manages session data lazy manner. session_regenerate_id() does not delete old session data and leave it accessible undefined period. i.e. It survives as long as it's accessed before expiration time. This is security threat when attacker steal session ID. session_r

Re: [PHP-DEV] [RFC][DISCUSSION] Deprecate INI set/get aliases.

> Hi all, > > This is the RFC for INI set/get alias function deprecation. > > https://wiki.php.net/rfc/deprecate_ini_set_get_aliases > > Open issue is exception. Almost all aliases should be deprecated, but there > may > be exceptions. I hope everyone agrees to deprecation by document at least. > >

Re: [PHP-DEV] Re: [PHP-CVS] com php-src: Revert "Disable PEAR by default": configure.in

Hi all, On Sat, Jan 31, 2015 at 9:24 AM, David Muir wrote: > Are we discussing the PEAR installer or everything related to PEAR? > > I see no reason to include the PEAR installer by default. Heck, on most > distros it's already split out into a separate package. > > If I already have to install

[PHP-DEV] [RFC][DISCUSSION] Deprecate INI set/get aliases.

Hi all, This is the RFC for INI set/get alias function deprecation. https://wiki.php.net/rfc/deprecate_ini_set_get_aliases Open issue is exception. Almost all aliases should be deprecated, but there may be exceptions. I hope everyone agrees to deprecation by document at least. Thank you for you

Re: [PHP-DEV][RFC][DISCUSSION] Group Use Declarations

On 31 January 2015 at 00:09, Marcio Almada wrote: > Hi, > > After a period of research along with part of the PHP community I'd > like to present this RFC which aims to improve PHP namespaces. > > The RFC: https://wiki.php.net/rfc/group_use_declarations > Along with its pull request: https://githu

Re: [PHP-DEV] Re: [PHP-CVS] com php-src: Revert "Disable PEAR by default": configure.in

> On 28 Jan 2015, at 8:58 pm, Ralf Lang wrote: > >> On 28.01.2015 10:46, Tony Marston wrote: >> "Sebastian Bergmann" wrote in message news:54c75d9e.8090...@php.net... >>> Am 27.01.2015 um 10:00 schrieb Lester Caine: composer has not even managed to get added to some distributions yet

[PHP-DEV][RFC][DISCUSSION] Group Use Declarations

Hi, After a period of research along with part of the PHP community I'd like to present this RFC which aims to improve PHP namespaces. The RFC: https://wiki.php.net/rfc/group_use_declarations Along with its pull request: https://github.com/php/php-src/pull/1005 Needless to say, I'm open to sugge

Re: [PHP-DEV] Why does session.gc_maxlifetime default to 1440 seconds?

Hi Markus, On Sat, Jan 31, 2015 at 4:02 AM, Markus Amalthea Magnuson < markus.magnu...@gmail.com> wrote: > I've been trying to figure out the design decision behind why the default > value of session.gc_maxlifetime is 1440 seconds (24 minutes)? > > Does anyone know or have any good sources? > B

Re: [PHP-DEV] Enable error_handler callback parameters to be passed by reference

Hi Dan, On Fri, Jan 30, 2015 at 6:38 PM, Dan Ackroyd wrote: > Why can't you just use in the error handler function to write the > exact message you want? > > http://php.net/manual/en/function.error-log.php > Forgot to mention important part. It's perfectly valid to use error_log. I just think l

Re: [PHP-DEV] Enable error_handler callback parameters to be passed by reference

Hi Dan, On Fri, Jan 30, 2015 at 6:38 PM, Dan Ackroyd wrote: > On 21 January 2015 at 04:39, Thomas Bley wrote: > > In userland it is sometimes necessary to extend PHP's notices/warnings > with additional information (e.g. username from session, stack trace, etc.) > > Why can't you just use in th

Re: [PHP-DEV] [RFC] Immutable variables and objects

Hi! > What I want to discuss is true immutability flag for variables and > parameters. There are a lot of languages that use "final" or "const" > keywords to prevent modification of variables. We can use this approach by > extending language syntax as following: Most of the languages that use "fi

Re: [PHP-DEV] [RFC] [DISCUSSION] pecl_http

Hi Stas! On 30/01/15 20:10, Stanislav Malyshev wrote: > Hi! > >> I’ve rewritten the RFC for pecl_http and hopefully addressed most of the >> things mentioned previously. > > Thank you, Michael, this is much better! > > I would still like to hear more about 2 extensions, especially about > raph

Re: [PHP-DEV] How does the PHP Ghost one-liner work?

On Jan 30, 2015, at 12:05, Patrick Schaaf mailto:p...@bof.de>> wrote: > % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";} gethostbyname($e);’ What a funny way to say gethostbyname(str_repeat("0", 2501)); Wow, I somehow missed the interpolation of $e into the value… . Guess I was too focused on

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

On 30/01/15 20:19, Stanislav Malyshev wrote: > Hi! > >> Just because that most of the code YOU have seen uses CamelCase does not >> mean that CamelCase is the "standard". I programmed in other languages for >> over 20 years before I switched to PHP, and in those languages the standard >> was snake

Re: [PHP-DEV] How does the PHP Ghost one-liner work?

Hi! >> does this indicate any problems with PHP? > > No. That said, it may make sense to put a cap on gethostbyname() argument as a public service, if we can find a good limit. IIRC, there are limits on both FQDN and hostname component lengths, so if we check for these limits, we may add protect

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

Hi! > Just because that most of the code YOU have seen uses CamelCase does not > mean that CamelCase is the "standard". I programmed in other languages for > over 20 years before I switched to PHP, and in those languages the standard > was snake_case. That is the standard I still use, and I will o

Re: [PHP-DEV] How does the PHP Ghost one-liner work?

On 30/01/2015 18:42, Robert Williams wrote: % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";} gethostbyname($e);’ What’s not being discussed is how it works. From the naive viewpoint of a PHP end-user, I’d expect this one-liner to have the same effect: % php -r '$e="0$e"; gethostbyname($e);’

Re: [PHP-DEV] How does the PHP Ghost one-liner work

Am 30.01.2015 20:09 schrieb "Leigh" : > > Well, I guess in theory we should be limiting the size of input to > gethostbyname to 255 characters. Yeah, but in theory the C library gethostbyname() should do the same... There will be a lot of things that could be checked up-front instead of relying on

Re: [PHP-DEV] [RFC] [DISCUSSION] pecl_http

Hi! > I’ve rewritten the RFC for pecl_http and hopefully addressed most of the > things mentioned previously. Thank you, Michael, this is much better! I would still like to hear more about 2 extensions, especially about raphf - it seems to be some framework for handling persistent resources, bu

Re: [PHP-DEV] How does the PHP Ghost one-liner work?

On 30 January 2015 at 19:05, Patrick Schaaf wrote: > Am 30.01.2015 19:43 schrieb "Robert Williams" : >> >> % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";} gethostbyname($e);’ > > What a funny way to say gethostbyname(str_repeat("0", 2501)); > >> does this indicate any problems with PHP? > > No.

Re: [PHP-DEV] How does the PHP Ghost one-liner work?

Am 30.01.2015 19:43 schrieb "Robert Williams" : > > % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";} gethostbyname($e);’ What a funny way to say gethostbyname(str_repeat("0", 2501)); > does this indicate any problems with PHP? No. best regards Patrick

[PHP-DEV] Why does session.gc_maxlifetime default to 1440 seconds?

Hey, I've been trying to figure out the design decision behind why the default value of session.gc_maxlifetime is 1440 seconds (24 minutes)? Does anyone know or have any good sources? Best regards, Markus

[PHP-DEV] How does the PHP Ghost one-liner work?

A PHP one-liner is being bandied about as one test of the recently discovered Ghost vulnerability in gethostbyname(). Taken from: http://ma.ttias.be/quick-tests-ghost-gethostbyname-vulnerability-cve-2015-0235/ Here it is: % php -r '$e="0";for($i=0;$i<2500;$i++){$e="0$e";} gethostbyname($e);’ W

Re: [PHP-DEV] [RFC] Immutable variables and objects

On 30/01/2015 13:07, Alexander Lisachenko wrote: What is wrong here? Emulated immutability. All methods will create a separate instance of request, so $baseRequest->withUri()->withMethod()->withHeader()->withBody() will create total 5 object instances. It's a memory overhead and time consumption

Re: [PHP-DEV] Re: [RFC] [DISCUSSION] pecl_http

On 30/01/15 17:45, Lester Caine wrote: > On 30/01/15 14:22, Michael Wallner wrote: >> - default etag hash algo for dynamic response bodies has changed to >>sha1 from crc32 and cannot be changed through an INI setting >> >> etags on dynamic content are, well, subject to change anyway, >>

[PHP-DEV] Re: [RFC] Immutable variables and objects

It can be a good idea to pass an object to the const parameter in php4 style (copy on write). Then original object will be untouched. The same will be for local objects with const flag. No reassignments. Always pass a copy (like with arrays now) пятница, 30 января 2015 г. пользователь Andrea Fau

Re: [PHP-DEV] Re: [RFC] [DISCUSSION] pecl_http

On 30/01/15 14:22, Michael Wallner wrote: > - default etag hash algo for dynamic response bodies has changed to >sha1 from crc32 and cannot be changed through an INI setting > > etags on dynamic content are, well, subject to change anyway, > so I don't see major troubles I presum

Re: [PHP-DEV] Use "caller" keyword, to access object caller.

On Fri, Jan 30, 2015 at 3:53 AM, S.A.N wrote: > The reason for creating circular references, usually due to the need to > bind objects. > > But this relationship can often be obtained from the context of the call. > > It will be very convenient to have a keyword that will return reference to > an

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

On 1/30/15 4:08 AM, Tony Marston wrote: ""Pavel Kouril"" wrote in message news:cab6yzuzymbaa5i3f9nsvebg2b7yjvo4ryvpy-eac78rsojx...@mail.gmail.com... On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: Hi, > Hello, just one observation - would be the name of the classes and namespac

Re: [PHP-DEV] Delete PHPNG branch from repo?

+1 On Jan 30, 2015 4:15 PM, "Ferenc Kovacs" wrote: > On Fri, Jan 30, 2015 at 3:04 PM, Xinchen Hui wrote: > > > Hey: > > > >there already are more than 2 people tell me they are trying to > > play with PHP7, but turns out they are playing with PHPNG branch(since > > we used to call it phpng).

Fwd: [PHP-DEV] [RFC] Immutable variables and objects

Hi, This accidentally went off-list, forwarding for everyone else’s sake. > Begin forwarded message: > > Date: 30 January 2015 16:01:43 GMT > Subject: Re: [PHP-DEV] [RFC] Immutable variables and objects > From: Alexander Lisachenko > To: Andrea Faulds > > > 2015-01-30 18:41 GMT+03:00 Andrea

Re: [PHP-DEV] php7dev Vagrant box

On 01/30/2015 05:06 AM, Rasmus Lerdorf wrote: > On 01/30/2015 02:17 AM, Ralf Becker wrote: >> Tried installing EGroupware (www.egroupware.org) on your vagrant box. >> >> Unfortunately our installation check, checking for various requirements, >> immediately triggers a segmentation fault :-( >> >> =

Re: [PHP-DEV] [RFC] Immutable variables and objects

2015-01-30 18:07 GMT+03:00 Andrea Faulds : > This approach wouldn’t solve the problem you’re describing. You *still* > need to produce a new request object, because the request object is > immutable. The mutability of its *properties* isn’t the issue. Thank you for this answer. However, pay an

Re: [PHP-DEV] [RFC] Immutable variables and objects

Hi Alexander, > On 30 Jan 2015, at 13:07, Alexander Lisachenko > wrote: > > Hello, internals! > > Today I was looking at PSR-7 and discovered this part of code: > > $body = new StringStream(json_encode(['tasks' => [ >'Code', >'Coffee', > ]]));; > $request = $baseRequest >->withUri

Re: [PHP-DEV] Re: [RFC] [DISCUSSION] pecl_http

On 30/01/15 15:08, Ferenc Kovacs wrote: > > > On Fri, Jan 30, 2015 at 2:45 PM, Michael Wallner > wrote: > >> https://wiki.php.net/rfc/pecl_http > hi, > > just a small question: what will be the upgrade path for existing > pecl_http users upgrading to 7.0? I'd conside

Re: [PHP-DEV] Delete PHPNG branch from repo?

On Fri, Jan 30, 2015 at 3:04 PM, Xinchen Hui wrote: > Hey: > >there already are more than 2 people tell me they are trying to > play with PHP7, but turns out they are playing with PHPNG branch(since > we used to call it phpng). > >as it already be merged into master. and there is also no

Re: [PHP-DEV] Re: [RFC] [DISCUSSION] pecl_http

On Fri, Jan 30, 2015 at 2:45 PM, Michael Wallner wrote: > On 29/01/15 21:25, Michael Wallner wrote: > > > >> On 29 01 2015, at 12:14, Michael Wallner >> > wrote: > >> > >> Hi! > >> > >> I’ve rewritten the RFC for pecl_http and hopefully addressed most of > >> the things ment

[PHP-DEV] Delete PHPNG branch from repo?

Hey: there already are more than 2 people tell me they are trying to play with PHP7, but turns out they are playing with PHPNG branch(since we used to call it phpng). as it already be merged into master. and there is also no tags against it. maybe we should delete it? any objections

[PHP-DEV] Re: [RFC] [DISCUSSION] pecl_http

On 29/01/15 21:25, Michael Wallner wrote: > >> On 29 01 2015, at 12:14, Michael Wallner > > wrote: >> >> Hi! >> >> I’ve rewritten the RFC for pecl_http and hopefully addressed most of >> the things mentioned previously. >> >> I you still find anything lacking, please let me kn

[PHP-DEV] [RFC] Immutable variables and objects

Hello, internals! Today I was looking at PSR-7 and discovered this part of code: $body = new StringStream(json_encode(['tasks' => [ 'Code', 'Coffee', ]]));; $request = $baseRequest ->withUri($uri->withPath('/tasks/user/' . $userId)) ->withMethod('POST') ->withHeader('Content-T

Re: [PHP-DEV] php7dev Vagrant box

On 01/30/2015 02:17 AM, Ralf Becker wrote: > Tried installing EGroupware (www.egroupware.org) on your vagrant box. > > Unfortunately our installation check, checking for various requirements, > immediately triggers a segmentation fault :-( > > ==> /var/log/nginx/php-fpm_error.log <== > [30-Jan-20

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

Hi Tony, On Fri, Jan 30, 2015 at 7:08 PM, Tony Marston wrote: > ""Pavel Kouril"" wrote in message > news:cab6yzuzymbaa5i3f9nsvebg2b7yjvo4ryvpy-eac78rsojx...@mail.gmail.com... > >> >> On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: >> >>> Hi, >>> >>> > > > > Hello, >> >> just one obser

Re: [PHP-DEV] [RFC] Fix "foreach" behavior

That sentence was about "foreach by value". "foreach by reference" in your example will still work as expected :) Thanks. Dmitry. On Fri, Jan 30, 2015 at 2:07 PM, Alain Williams wrote: > On Fri, Jan 30, 2015 at 11:23:19AM +0400, Dmitry Stogov wrote: > > Hi, > > > > I'd like to start discussion

Re: [PHP-DEV] [RFC] Fix "foreach" behavior

On Fri, Jan 30, 2015 at 11:23:19AM +0400, Dmitry Stogov wrote: > Hi, > > I'd like to start discussion about fixing inconsistent "foreach" statement > behavior. > The implementation is almost done. It not only fixes inconsistencies in a > defined by RFC way but also improves performance in most usu

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

On Fri, Jan 30, 2015 at 6:16 AM, César Rodas wrote: > Hi! > > I'm wondering if it would be a good idea to have a `strict` mode in PHP. > Many language have them and it is a good idea. > > I think it should be a bit different in PHP, it should encourage the > following things: > > - Avoid depreca

Re: [PHP-DEV] [RFC] Fix "foreach" behavior

On Fri, Jan 30, 2015 at 8:23 AM, Dmitry Stogov wrote: > Hi, > > I'd like to start discussion about fixing inconsistent "foreach" statement > behavior. > The implementation is almost done. It not only fixes inconsistencies in a > defined by RFC way but also improves performance in most usual cases

Re: [PHP-DEV] [RFC] Fix "foreach" behavior

Hi Dmitry, Thank you for picking up on our proposal. RFC and patch look promising - awesome work! I am looking forward to it. Ben == Original == From: Dmitry Stogov To: PHP Internals Date: Fri, 30 Jan 2015 08:23:19 +0100 Subject: [PHP-DEV] [RFC] Fix "foreach" behavior Hi, I'

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

On Fri, Jan 30, 2015 at 11:16:41AM +0100, Martin Keckeis wrote: > > > > You might get more approval for: declare(strict=1); > > > > I would like to see this to help catch typeos in variable names. If a > > variable > > is assigned and it does not already exist some sort of error would be > > raise

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: > Hi, > > Discussion has been very low on this topic since it was proposed on > August 19th, so I just opened the vote on the RFC whether to add > pecl_http to the core. The vote will be open until about 12:00 UTC on > Friday, February 6th.

Re: [PHP-DEV] php7dev Vagrant box

Am 28.01.15 um 23:50 schrieb Rasmus Lerdorf: > As a follow-up to my PHP7 Homework post last week, here is a bit of > spoon-feeding for all you lurkers on this list. > > https://atlas.hashicorp.com/rasmus/boxes/php7dev > > The description there should be fairly self-explanatory. If you have a > comp

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

> > You might get more approval for: declare(strict=1); > > I would like to see this to help catch typeos in variable names. If a > variable > is assigned and it does not already exist some sort of error would be > raised. > The inspiration of this is from Perl where 'use strict' does this. > > Ho

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

""Pavel Kouril"" wrote in message news:cab6yzuzymbaa5i3f9nsvebg2b7yjvo4ryvpy-eac78rsojx...@mail.gmail.com... On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: Hi, > Hello, just one observation - would be the name of the classes and namespaces stay the same after merging? I persona

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

""Pavel Kouril"" wrote in message news:cab6yzuzymbaa5i3f9nsvebg2b7yjvo4ryvpy-eac78rsojx...@mail.gmail.com... On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: Hi, > Hello, just one observation - would be the name of the classes and namespaces stay the same after merging? I persona

Re: [PHP-DEV] [RFC] [DISCUSSION] pecl_http

"Michael Wallner" wrote in message news:bd568277-5a74-4a66-ac5d-173da93fa...@php.net... <> I think PHP is, and should be, a language where you’re more successful in getting things done, instead of having to do it right in one way only. Well said! I couldn't agree more. -- Tony Marston

Re: [PHP-DEV] [RFC] [VOTE] pecl_http

""Pavel Kouril"" wrote in message news:cab6yzuzymbaa5i3f9nsvebg2b7yjvo4ryvpy-eac78rsojx...@mail.gmail.com... On Wed, Jan 28, 2015 at 1:17 PM, Michael Wallner wrote: Hi, > Hello, just one observation - would be the name of the classes and namespaces stay the same after merging? I persona

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

Hi, > On 30 Jan 2015, at 09:14, Florian Anderiasch wrote: > > > >> On 01/30/2015 06:36 AM, Yasuo Ohgaki wrote: >> Hi Cesar, >> >>> On Fri, Jan 30, 2015 at 2:16 PM, César Rodas wrote: >>> >>> I'm wondering if it would be a good idea to have a `strict` mode in PHP. >>> Many language have them

Re: [PHP-DEV] Enable error_handler callback parameters to be passed by reference

On 21 January 2015 at 04:39, Thomas Bley wrote: > In userland it is sometimes necessary to extend PHP's notices/warnings with > additional information (e.g. username from session, stack trace, etc.) Why can't you just use in the error handler function to write the exact message you want? http:/

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

On Fri, Jan 30, 2015 at 02:16:20AM -0300, César Rodas wrote: > Hi! > > I'm wondering if it would be a good idea to have a `strict` mode in PHP. > Many language have them and it is a good idea. > > I think it should be a bit different in PHP, it should encourage the > following things: > > - Avo

Re: [PHP-DEV] Is it a good idea to have a "strict" mode?

On 01/30/2015 06:36 AM, Yasuo Ohgaki wrote: > Hi Cesar, > > On Fri, Jan 30, 2015 at 2:16 PM, César Rodas wrote: > >> I'm wondering if it would be a good idea to have a `strict` mode in PHP. >> Many language have them and it is a good idea. >> >> I think it should be a bit different in PHP, it