Re: [PHP-DEV] [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting

2025-04-10 Thread Andrew Lyons
> I can't find any information on why this setting was introduced. No, I couldn't find anything either. I did try to investigate and all I could find was that it was introduced by Joe Watkins in 0819e6dc9b4788e5d44b64f8e606a56c969a1588 in 2019 but I haven't been able to find any history of RFC or

Re: [PHP-DEV] [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting

2025-04-10 Thread Andrew Lyons
> > Full agreement with Tim here - make PHP friendly to development. Generally I do agree with this sentiment. Languages should be developer-friendly, but not at the expense of safety. Developers are able to configure an INI setting in multiple ways including modifying an ini file, using the `ini

Re: [PHP-DEV] [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting

2025-04-10 Thread Andrew Lyons
On Thu, 10 Apr 2025 at 23:20, Tim Düsterhus wrote: > As I had said on GitHub before, but to put it onto the list for > visibility: > > I'd rather see the value in `php.ini-production` being changed to `Off` > to match the built-in default. see > https://github.com/php/php-src/pull/18215#issuecomme

[PHP-DEV] [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting

2025-04-08 Thread Andrew Lyons
Hi everyone, I've been working on a new RFC which proposes changing the default value for the zend.exception_ignore_args INI setting from Off to On. The intent of this change is to make PHP installations safer by default and prevent the accidental release of sensitive information in stack traces.

[PHP-DEV] Introduction - Andrew Lyons

2025-04-01 Thread Andrew Lyons
fault value for zend.exception_ignore_args to a safer default. My wiki username is andrewlyons Best wishes, Andrew Lyons