Re: [PHP-DEV] Re: RFC: Implementing a core anti-XSS escaping class

2012-09-19 Thread Tomas Creemers
ameter. While it's still possible to add that to a static-only class, that would be more cumbersome and less correct than instantiation (since the encoding is state, technically). My apologies. Carry on ;-) Tomas > On 19 Sep 2012, at 08:39, Tomas Creemers wrote: > [snip] >> >

Re: [PHP-DEV] Re: RFC: Implementing a core anti-XSS escaping class

2012-09-19 Thread Tomas Creemers
On Wed, Sep 19, 2012 at 8:34 AM, Sebastian Krebs wrote: > > > 2012/9/19 Tomas Creemers >> >> Hi all, >> >> >> >> If this is going to be implemented as a class, what is the advantage >> of instantiation for this? Unless I'm missing i

[PHP-DEV] Re: RFC: Implementing a core anti-XSS escaping class

2012-09-18 Thread Tomas Creemers
Hi all, If this is going to be implemented as a class, what is the advantage of instantiation for this? Unless I'm missing it, I would propose that the functions are made static. In other words, I would prefer this: echo Escaper::escapeHtml('test'); over this: $e = new Escaper; echo $e->esc

Re: [PHP-DEV] [PATCH] Notice on array to string convertion

2011-06-02 Thread Tomas Creemers
is conversion is not neccesarlily an error (and E_WARNING is just a non-fatal error), the conclusion is that this conversion should trigger an E_NOTICE. Best regards, Tomas Creemers -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Re: Request for Comments: Release Process: version numbering

2011-06-02 Thread Tomas Creemers
rom the current numbering scheme. Then again, the current notation in the RFC might just be a typo :-) Best regards, Tomas Creemers -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php