Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Yasuo Ohgaki
Hi Christoph, On Wed, Jul 6, 2016 at 12:37 AM, Christoph Becker wrote: > On 05.07.2016 at 16:32, Leigh wrote: > >> On 5 July 2016 at 04:02, Pierre Joye wrote: >>> We can argue about the provided pnrng being CS but it is not php's job to >>> decide. >> >> I think we need to drop the concerns abou

Re: [PHP-DEV] Request for Karma

2016-07-05 Thread Ferenc Kovacs
On Tue, Jul 5, 2016 at 4:51 PM, André Rømcke wrote: > Hello PHP Team, > > Even if to late for 7.1, it’s summer time and I’d like to contribute to > moving forward on updating a RFC for Property Accessors Syntax > to bring that up to level of 7.x. > > I’m not a C programmer so I’m interested in fi

Re: [PHP-DEV] New escaped output operator

2016-07-05 Thread Ferenc Kovacs
On Sun, Jun 19, 2016 at 6:53 PM, Михаил Востриков < michael.vostri...@gmail.com> wrote: > Please give me RFC karma. My wiki account is "michael-vostrikov". I plan to > create an RFC for this feature. > > hi, I've just granted you with rfc karma on the wiki. -- Ferenc Kovács @Tyr43l - http://ty

Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Stanislav Malyshev
Hi! > Some of us worried about CSPRNG state exposure. I'm wondering how many > of you will vote in favor if I change the RFC to use hash functions > optionally. This means code and INI settings related to hash function > selection will remain. Please note that ext/hash is not built always. > If yo

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Levi Morrison
> Another (minor) issue I have with the RFC is the introduction of > ReflectionNamedType. A simpler alternative appears to be to add the > getName() method to ReflectionType; for unnamed types this could simply > return (string) $reflectionType. That might not be the most farsighted > design deci

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Levi Morrison
> Or if the aim is to simplify the reflection usage, why require the if > statement at all: > > try { > $r = $type->getReflectionClass(); > } catch ( ReflectionException $e ) { > // type is builtin or refers to an undefined class > } I don't think this is actually simpler if you expand the

Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Stanislav Malyshev
Hi! > Some of us worried about CSPRNG state exposure. I'm wondering how many > of you will vote in favor if I change the RFC to use hash functions > optionally. This means code and INI settings related to hash function > selection will remain. Please note that ext/hash is not built always. > If yo

Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Tom Worster
On 7/5/16 11:37 AM, Christoph Becker wrote: On 05.07.2016 at 16:32, Leigh wrote: On 5 July 2016 at 04:02, Pierre Joye wrote: We can argue about the provided pnrng being CS but it is not php's job to decide. I think we need to drop the concerns about exposing "RNG state". A reminder of what

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Nikita Popov
On Tue, Jul 5, 2016 at 3:21 PM, Levi Morrison wrote: > On Mon, Jul 4, 2016 at 10:51 AM, Björn Larsson > wrote: > > Den 2016-06-30 kl. 23:57, skrev Nikita Popov: > >> > >> On Thu, Jun 30, 2016 at 6:06 PM, Levi Morrison wrote: > >> > >>> The RFC for improving ReflectionType[1] is now in voting ph

Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Christoph Becker
On 05.07.2016 at 16:32, Leigh wrote: > On 5 July 2016 at 04:02, Pierre Joye wrote: >> We can argue about the provided pnrng being CS but it is not php's job to >> decide. > > I think we need to drop the concerns about exposing "RNG state". > > A reminder of what php_random_bytes looks at (in or

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Christoph Becker
On 05.07.2016 at 15:21, Levi Morrison wrote: > On Mon, Jul 4, 2016 at 10:51 AM, Björn Larsson > wrote: >> Den 2016-06-30 kl. 23:57, skrev Nikita Popov: >>> >>> On Thu, Jun 30, 2016 at 6:06 PM, Levi Morrison wrote: >>> The RFC for improving ReflectionType[1] is now in voting phase. The

[PHP-DEV] Request for Karma

2016-07-05 Thread André Rømcke
Hello PHP Team, Even if to late for 7.1, it’s summer time and I’d like to contribute to moving forward on updating a RFC for Property Accessors Syntax to bring that up to level of 7.x. I’m not a C programmer so I’m interested in finding someone to co-write this with. As for background I’m leading

Re: [PHP-DEV] Re: [RFC][VOTE] Session ID without hashing

2016-07-05 Thread Leigh
On 5 July 2016 at 04:02, Pierre Joye wrote: > We can argue about the provided pnrng being CS but it is not php's job to > decide. I think we need to drop the concerns about exposing "RNG state". A reminder of what php_random_bytes looks at (in order): * CryptGenRandom on Windows * arc4random_buf

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Rowan Collins
On 05/07/2016 14:21, Levi Morrison wrote: if ($type instanceof ReflectionClassType) { $r = $type->getClass(); } The (currently) correct code would be: if (class_exists($type->getName()) || interface_exists($type->getName())) { $r = new ReflectionClass($type->getNam

Re: [PHP-DEV] [RFC][Vote] ReflectionType Improvements

2016-07-05 Thread Levi Morrison
On Mon, Jul 4, 2016 at 10:51 AM, Björn Larsson wrote: > Den 2016-06-30 kl. 23:57, skrev Nikita Popov: >> >> On Thu, Jun 30, 2016 at 6:06 PM, Levi Morrison wrote: >> >>> The RFC for improving ReflectionType[1] is now in voting phase. The >>> voting >>> window is June 30th through July 8th. I have

[PHP-DEV] UGLY Benchmark Results for PHP Master 2016-07-05

2016-07-05 Thread lp_benchmark_robot
Results for project PHP master, build date 2016-07-05 06:29:26+03:00 commit: 4b9362d previous commit:c2b29a5 revision date: 2016-07-04 16:48:59+02:00 environment:Haswell-EP cpu:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz 2x18 cores, stepping 2, LLC 45 MB