Re: [PHP-DEV] Server-Side Request/Response Objects

2016-09-26 Thread Korvin Szanto
Hi Paul, Thank you for spending the time to actually put this together! I've been dipping my toes in the water asking around about this (sort of) as well and feedback so far has been "That sounds great but I don't think there is enough interest." So I'm very interested to see what kind of response

Re: [PHP-DEV] Password_hash salt generation refactor

2015-10-18 Thread Korvin Szanto
+1 for 7.0.x security patch release, best effort sounds scary. On Sun, Oct 18, 2015 at 4:01 PM Anthony Ferrara wrote: > All, > > With PHP 7 comes random_bytes and random_int. This duplicates some of > the logic internally that password_hash uses to generate its salt. > > I would like to refactor

Re: [PHP-DEV] [RFC] Void Return Type (v0.2, reƶpening)

2015-10-15 Thread Korvin Szanto
On Thu, Oct 15, 2015 at 4:21 PM Rowan Collins wrote: > On 15 October 2015 20:33:04 BST, Andrea Faulds wrote: > >> Obviously, type hints for internal functions are a bit weird anyway, > >but > >> there's no reason to assume that every function documented as void > >would > >> suddenly be annotate

Re: [PHP-DEV] [RFC] Void Return Type (v0.2, reƶpening)

2015-10-14 Thread Korvin Szanto
On Wed, Oct 14, 2015 at 3:47 PM Levi Morrison wrote: > On Wed, Oct 14, 2015 at 4:00 PM, Stanislav Malyshev > wrote: > > Hi! > > > >> I'm reviving my Void Return Type RFC, this time for PHP 7.1: > >> > >> https://wiki.php.net/rfc/void_return_type > >> > >> Please read it and tell me your thoughts

Re: [PHP-DEV] New function proposal

2015-10-09 Thread Korvin Szanto
I agree with Ben on this, I personally use var_dump();exit; in my code a lot, but there's no reason this needs to be in the core and not in userland: function dd(...$args) { var_dump(...$args); exit; } On Fri, Oct 9, 2015 at 5:24 PM Kris Childress wrote: > Mattias, > > As an avid user o

Re: [PHP-DEV] Generic classes and methods RFC

2015-09-11 Thread Korvin Szanto
Levi, It's my understanding that the "type variable" is a member of the instance and not of the class. In at least java, generics are unavailable in static context[1] though they can be specifically defined on the static method itself[2]. [1] http://stackoverflow.com/questions/936377/static-method

Re: [PHP-DEV] Fwd: [php-src] Constant-Time bin2hex() implementation (#909)

2014-11-26 Thread Korvin Szanto
I don't like the idea of any mandatory slow down, trivial or not. This should be opt in. On Wed, Nov 26, 2014, 12:28 PM Rasmus Lerdorf wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 11/26/2014 11:45 AM, Anthony Ferrara wrote: > >> That seems like a lot of functions to artificial

Re: [PHP-DEV] ArrayPath

2014-10-07 Thread Korvin Szanto
In every project I have worked on in the last few years, I've implemented this. If I have an array that I can't be sure is well formed and need to get a value at any depth without triggering expensive notices, the recommended way today is to check if each value is set and is an array: http://3v4l.o