Re: [PHP-DEV] [RFC Discussion] Precise Session Management

2015-12-21 Thread Stanislav Malyshev
Hi! > I would like to restart better session management for PHP 7.1. > > https://wiki.php.net/rfc/precise_session_management I've read the RFC and I have some questions and comments: 1. I do not see why old session being active is a problem when you regenerate. You write "Attacker may abuse sto

Re: [PHP-DEV] Re: [RFC Discussion] Precise Session Management

2015-12-21 Thread Yasuo Ohgaki
Hi Mike, On Mon, Dec 21, 2015 at 1:24 PM, Mike Willbanks wrote: > > On Sun, Dec 20, 2015 at 7:01 PM, Yasuo Ohgaki wrote: >> >> Hi all, >> >> On Sat, Dec 19, 2015 at 7:33 AM, Yasuo Ohgaki wrote: >> > I would like to restart better session management for PHP 7.1. >> > >> > https://wiki.php.net/rf

Re: [PHP-DEV] ext/interbase maintanance

2015-12-21 Thread Lester Caine
On 21/12/15 14:30, Anatol Belski wrote: > It's a ping as you was expressing the intention to maintain ext/interbase > https://wiki.php.net/rfc/removal_of_dead_sapis_and_exts#extinterbase . How > it currently looks like, ext/interbase is still broken and is not completely > ported to PHP7. Fe there'

Re: [PHP-DEV] CATCH in master (vs 7.0)

2015-12-21 Thread Dmitry Stogov
On Mon, Dec 21, 2015 at 2:27 PM, Bob Weinand wrote: > > Am 21.12.2015 um 06:24 schrieb Sebastian Bergmann : > > > > Am 20.12.2015 um 21:53 schrieb Nikita Popov: > >> For VLD you should hide the value if opline->result.num is set, similar > to > >> what zend_dump does: > > > > Is zend_dump() calla

[PHP-DEV] ext/interbase maintanance

2015-12-21 Thread Anatol Belski
Hi Marius Adrian, It's a ping as you was expressing the intention to maintain ext/interbase https://wiki.php.net/rfc/removal_of_dead_sapis_and_exts#extinterbase . How it currently looks like, ext/interbase is still broken and is not completely ported to PHP7. Fe there's currently this bug ticket h

[PHP-DEV] Benchmark Results for PHP Master 2015-12-21

2015-12-21 Thread lp_benchmark_robot
Results for project PHP master, build date 2015-12-21 06:30:10+02:00 commit: 6f4286f303d4238d3b44f6e4046071ddda379b6b revision date: 2015-12-20 15:27:13+01:00 environment:Haswell-EP cpu:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz 2x18 cores, stepping 2, LLC 45 MB mem

Re: [PHP-DEV] CATCH in master (vs 7.0)

2015-12-21 Thread Bob Weinand
> Am 21.12.2015 um 06:24 schrieb Sebastian Bergmann : > > Am 20.12.2015 um 21:53 schrieb Nikita Popov: >> For VLD you should hide the value if opline->result.num is set, similar to >> what zend_dump does: > > Is zend_dump() callable from userland? No, and it's a function only available when Opti

Re: [PHP-DEV] Re: CATCH in master (vs 7.0)

2015-12-21 Thread Dmitry Stogov
On Mon, Dec 21, 2015 at 8:24 AM, Sebastian Bergmann wrote: > Am 20.12.2015 um 21:53 schrieb Nikita Popov: > > For VLD you should hide the value if opline->result.num is set, similar > to > > what zend_dump does: > > Is zend_dump() callable from userland? > It's a part of ext/opcache and used to