[PHP-DEV] Broken link at https://wiki.php.net/systems/vcs

Per [1], there is a typo in the link at https://wiki.php.net/systems/vcs It points at the unreachable https://www.githib.com/php instead of https://github.com/php -- Timo Tijhof https://timotijhof.net/ [1]: https://wiki.php.net/systems/vcs?do=register

Re: [PHP-DEV] Maintain Windows PHP dependency builds in a GH repo

On 13.09.2024 at 11:42, Derick Rethans wrote: > On Wed, 11 Sep 2024, Christoph M. Becker wrote: > >> While the upload/download issue might be solved one way or the other, >> having a Git repository for the series files might solve a couple of >> issues. I've set up

Re: [PHP-DEV] [GitHub #7913] Vulnerability due to insecure default values for session.cookie_secure and session.cookie_httponly

On Fri, Sep 13, 2024 at 9:51 PM Claude Pache wrote: > > Le 13 sept. 2024 à 16:13, etkaar a écrit : > > Hi! > > I've created this issue in January 2022 but it seems it wasn't noticed yet > (since you probably do watch the mailing lists more than > GitHub):https://github.com/php/php-src/issues/7

Re: [PHP-DEV] What to do with ext/snmp?

On Fri, 13 Sept 2024 at 17:18, Gina P. Banyard wrote: > > On Wednesday, 11 September 2024 at 16:04, Derick Rethans > wrote: > > But XML parsing is such an integral part of PHP, that this absolutely > > should be in core. For many users, if it's not in core, they can't use > > it. Or at least tha

Re: [PHP-DEV] Proposal: Add support for interactive console application on Windows

On Sep 13, 2024, at 3:24 PM, Christoph M. Becker wrote: > > Note that there are already a couple of related extensions on PECL[1]; > of these only win32service is still maintained, though. Still, having a > look at these extensions might make sense. I actually maintain one for IBM i [1], but it

Re: [PHP-DEV] bikeshed: Typed Aliases

On Mon, Sep 9, 2024, at 4:35 PM, Rowan Tommins [IMSoP] wrote: > On 09/09/2024 19:41, Mike Schinkel wrote: > >> Referencing prior art (e.g. Go) PHP could allow int literals — e.g. `1`, >> `47`, etc. — to be passed to typedefs derived from ints but require int >> variables to be typecast to the req

Re: [PHP-DEV] Proposal: Add support for interactive console application on Windows

On 13.09.2024 at 16:07, Sara Golemon wrote: > On Thu, Oct 12, 2023 at 6:50 PM Patrik Pasterčík wrote: > >> An analysis of other solutions, a detailed description of the problems >> and a proof of concept is in the proposal in the issue here: >> https://github.com/php/php-src/issues/12227 > > Resu

Re: [PHP-DEV] [GitHub #7913] Vulnerability due to insecure default values for session.cookie_secure and session.cookie_httponly

> Le 13 sept. 2024 à 16:13, etkaar a écrit : > > Hi! > > I've created this issue in January 2022 but it seems it wasn't noticed yet > (since you probably do watch the mailing lists more than GitHub): > https://github.com/php/php-src/issues/7913 > > Kind Regards, > etkaar Hi, * Defaulting `s

Re: [PHP-DEV] What to do with ext/snmp?

On Wednesday, 11 September 2024 at 16:04, Derick Rethans wrote: > But XML parsing is such an integral part of PHP, that this absolutely > should be in core. For many users, if it's not in core, they can't use > it. Or at least that used to be a big problem. Is XML parsing such an integral par

[PHP-DEV] [GitHub #7913] Vulnerability due to insecure default values for session.cookie_secure and session.cookie_httponly

Hi! I've created this issue in January 2022 but it seems it wasn't noticed yet (since you probably do watch the mailing lists more than GitHub): https://github.com/php/php-src/issues/7913 Kind Regards, etkaar

Re: [PHP-DEV] Proposal: Add support for interactive console application on Windows

On Thu, Oct 12, 2023 at 6:50 PM Patrik Pasterčík wrote: > I would like to propose extending PHP with support functions to enable > interactive console work on Windows system. I mean the ability to > control a PHP script running from the console using arrow keys, or > function keys like "F1", etc.

Re: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings

Le 13/09/2024 à 12:33, Christoph M. Becker a écrit : However, Windows support might not be that important anyway, So for now, my plans are: - Maintain the xpass extension for PHP 8.x New version 1.1.0 have the additional functions/macros - Wait for user feedback/comments - Open a RFC (afte

[PHP-DEV] PHP 8.2.24RC1 available for testing

PHP 8.2.24RC1 has just been released and can be downloaded from: https://downloads.php.net/~pierrick/ or https://qa.php.net/ or use the git tag: php-8.2.24RC1 Windows binaries are available at: https://windows.php.net/qa/#php-8.2 Please test it carefully, and report any bugs to https://github

Re: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings

On 13.09.2024 at 10:09, Remi Collet wrote: > For now, these are provided in the xpass extension. > Main issue is Windows. > > => https://pecl.php.net/package/xpass Yeah, it might be an issue to port this library to Windows. There is a vcpkg port[1], but only for Linux. I haven't had a closer lo

Re: [PHP-DEV] Maintain Windows PHP dependency builds in a GH repo

On Wed, 11 Sep 2024, Christoph M. Becker wrote: > On 11.09.2024 at 15:51, Derick Rethans wrote: > > > > Ideally, instead of having downloads.php.net/~windows, we have > > downloads.php.net/windows which is a Git repository for the series > > files, but it is probably better if it's all in that s

Re: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings

Le 13/09/2024 à 09:57, Ayesh Karunaratne a écrit : Assuming the intended use case is compatibility with `/etc/shadow` or something similar, would it not make sense to add these algos to `password_hash` function, and not add new functions? Yes this another goal (later) For now, these are provi

Re: [PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings

> This proposal provides more bindings: > > * crypt_gensalt($salt, $count) > * crypt_preferred_method() > * crypt_checksalt($salt) > > And more Algo > > * scrypt > * yescrypt > * gost-yescrypt > Assuming the intended use case is compatibility with `/etc/shadow` or something similar, would it not m

[PHP-DEV] For discussion (no RFC for now) - more libcrypt bindings

Hi, Using "crypt" function is a mess (perhaps one of the reason for password_hash) This proposal provides more bindings: * crypt_gensalt($salt, $count) * crypt_preferred_method() * crypt_checksalt($salt) And more Algo * scrypt * yescrypt * gost-yescrypt These were already usable but very ha