Re: [PHP-DEV] RFC: Increasing the default BCrypt cost

2023-10-04 Thread steve
> On 09/07/2023 4:37 PM CDT Craig Francis wrote: > > We recently discussed hashing and costs at one of our OWASP meetings, we came > to conclusion that the default of 10 for bcrypt probably should be increased, > but only to 11 for typical websites. The main concern was about making > denial-o

Re: [PHP-DEV] [VOTE] Increasing the default BCrypt cost

2023-10-04 Thread steve
> On 09/22/2023 2:04 AM CDT Nicolas Grekas wrote: > > > I was wondering if you considered also raising the Argon2 default cost? Has > this been discussed? > Argon2 defaults are actually quite high at a theoretical speed of ~1.3 kH/s/GPU (960,000,000,000/(64*1024^2)/(3*4-1) or in general band

Re: [PHP-DEV] [VOTE] Increasing the default BCrypt cost

2023-10-04 Thread steve
I know I'm late but bcrypt cost 12 (which looks like the winner) is high. Cost 12 is ~1 kH/s/GPU and the accepted limit for good settings is <10 kH/s/GPU. Cost 12 is 10x stronger than it needs to be as a *minimum*. I believe cost 10 is a good *default* for the next 1-3 years and cost 11 should b

Re: [PHP-DEV] RFC proposal to deprecate crypt()

2022-02-21 Thread steve
If crypt() is removed, you can still use password_verify() to verify all the password hashes created by crypt(). The only thing you lose is creating those bad password hashes. Which can be done in userland because most people aren't changing their passwords daily. So it will run that slow userla

Re: [PHP-DEV] RFC proposal to deprecate crypt()

2022-02-20 Thread steve
> On 02/20/2022 1:10 AM Stanislav Malyshev wrote: > > > Hi! > > On 2/19/22 6:03 PM, st...@tobtu.com wrote: > > crypt() should be deprecate because it can be used to create bad password > > hashes: > > I don't think it's a good reason for deprecating functions. A lot of > functions, if used

Re: [PHP-DEV] RFC proposal to deprecate crypt()

2022-02-19 Thread steve
hash() is for cryptographic hashes and checksums. crypt() only supports password hashing algorithms which should not be used as a cryptographic hash or checksum because they are purposefully slow. > On 02/19/2022 7:16 PM Vasilii Shpilchin wrote: > > > Hashes are not for passwords only. For

[PHP-DEV] RFC proposal to deprecate crypt()

2022-02-19 Thread steve
crypt() should be deprecate because it can be used to create bad password hashes: * descrypt: 12 bits of salt is too small and it's ~100x faster to crack than md5crypt. Which itself is too fast for password crackers (see CVE-2012-3287). * Extended DES: 24 bits of salt is too small. * md5crypt is

Re: [PHP-DEV] Re: New function: stream_socket_listen()

2013-09-06 Thread Steve McKinney
ancisco that is looking for senior PHP developers. Awesome work environment, super good salary and benefits and very cool cloud/mobile growth market. Check us out: http://www.metrodigi.com/jobs HIRING 4-5 DEVELOPERS IMMEDIATELY. Cheers, Steve Steven McKinney *metrodigi | CEO* tel: 415.57

Re: [PHP-DEV] [PROPOSAL] add a leading backslash to classname when serializing/var_exporting

2013-04-09 Thread Steve Clay
Foo::__set_state(... I would think it'd be easy enough to strip away the escapes. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [RFC] more secure unserialize()

2013-04-01 Thread Steve Clay
AC to secure the data channel. Trivially done in userland. The next best thing would be an unserialize that would simply fail if a non-whitelisted class was found. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.ph

Re: [PHP-DEV] [RFC] more secure unserialize()

2013-03-31 Thread Steve Clay
AC during encryption of the session data. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] DateTimeImmutable

2013-03-27 Thread Steve Clay
. Much agreed. DateTimeImmutable is welcomed as a better design, but it is not a clean substitute for a DataTime object. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Could we kill call_user_func?

2013-03-21 Thread Steve Clay
On 3/21/13 7:37 AM, Derick Rethans wrote: On Fri, 15 Mar 2013, Steve Clay wrote: call_user_func() just seems so ugly now that we have nicer syntax in so many other areas. That doesn't mean we should just be ripping out functionality that works perfectly fine. I was not clear in my in

Re: [PHP-DEV] Allow all callables to be called directly

2013-03-15 Thread Steve Clay
assume that it would be supported like other callables... Anyway, file under Would Be Nice Someday. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Allow all callables to be called directly

2013-03-15 Thread Steve Clay
like it. I do need to use in case my $callable is an object callback. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] Could we kill call_user_func?

2013-03-15 Thread Steve Clay
perty. The workaround could be: ($obj->foo)(); call_user_func() just seems so ugly now that we have nicer syntax in so many other areas. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] static type-references

2013-03-14 Thread Steve Clay
On 3/14/13 12:26 PM, Rasmus Schultz wrote: $user_type = typeof(User); I missed this. We'll soon have User::class. This may resolve to, e.g., 'Foo\User'. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscri

Re: [PHP-DEV] static type-references

2013-03-14 Thread Steve Clay
erwise: class string {} gettype(new string); ??? Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] feature request : easy shared memory

2013-03-14 Thread Steve Clay
On 3/14/13 10:31 AM, rene7705 wrote: (ideally I would like to get a pointer) PHP's environment is torn down after every request, so no matter what the mechanism you generally can't store anything that can't be serialized. See also https://www.google.com/search?q=php+share

Re: [PHP-DEV] [RFC] unset(): return bool if the variable has existed

2013-03-06 Thread Steve Clay
On 3/6/13 4:10 PM, Bob Weinand wrote: https://wiki.php.net/rfc/unset_bool What's the return value of unset($setValue, $undefined) ? Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Proposed changes to PHP language

2013-03-06 Thread Steve Clay
ata should not be injected into existing vars. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Getting separate outputs with Date Functions

2013-03-05 Thread Steve Clay
're sitting in any particular TZ. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] I would like to write an RFC for the addition of an internal keyword

2013-02-28 Thread Steve Clay
to to implement the damn thing... Steve Clay -- http://www.mrclay.org/ On 2/28/13 1:56 AM, Jens Riisom Schultz wrote: * In response to the argument that php has no assembly concept: I know this, but namespaces are as close as we get, and would effectively solve this. -- PHP Int

Re: [PHP-DEV] I would like to write an RFC for the addition of an internal keyword

2013-02-27 Thread Steve Clay
On 2/27/13 10:22 AM, Sebastian Krebs wrote: 2013/2/27 Steve Clay phpDoc already supports "@access private" for items to be left out of public documentation. An IDE could be configured to have these items appear greyed or not to appear in autocomplete lists. a) You misuse th

Re: [PHP-DEV] I would like to write an RFC for the addition of an internal keyword

2013-02-27 Thread Steve Clay
l access: embrace OOP and eliminate statically accessible APIs (global vars/funcs and static props/methods) that you don't want people calling. You don't actually need them. Although closures helped too, PHP gained true information hiding in 5.0 with "private". Steve Clay --

Re: [PHP-DEV] [RFC] Integrating Zend Optimizer+ into the PHP distribution

2013-01-30 Thread Steve Clay
ime served in PECL is essential, they can vote it down. If XCache would be better, someone could submit an RFC... Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Travis-CI supports 5.5

2013-01-29 Thread Steve Clay
On 1/29/13 2:17 PM, Jordi Boggiano wrote: Travis is still running 5.5.0-alpha1 that segfaults under some conditions when using composer which makes a lot of builds fails for nothing. How Symfony deals with this: matrix: allow_failures: - php: 5.5 Steve Clay -- http://www.mrclay.org

[PHP-DEV] Travis-CI supports 5.5 (was: Voting periods)

2013-01-29 Thread Steve Clay
ravis.yml https://github.com/cakephp/cakephp/blob/master/.travis.yml https://github.com/auraphp/Aura.Web/blob/develop/.travis.yml https://github.com/EllisLab/CodeIgniter/blob/develop/.travis.yml https://github.com/laravel/laravel/blob/master/.travis.yml ... Steve Clay -- http://www.mrclay.org/ -

[PHP-DEV] Thoughts on "scalar objects"

2013-01-28 Thread Steve Clay
ually handled the call, the second would have the return value. * Would it be possible to limit this behavior to a particular scope? Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] C# properties vs. accessors RFC

2013-01-23 Thread Steve Clay
anywhere public Bar $bar; // "read only" protected Baz? $_baz; public function get baz { return $this->_baz; } } Down the road we could further address how to shorten this syntax but while keeping it clear that accessors are just functions and properties are just v

Re: [PHP-DEV] [VOTE] Property Accessors for 5.5

2013-01-17 Thread Steve Clay
varying behavior (e.g. direct prop read vs. getter call) *depending on the call stack*. * Giving issetter/unsetter no direct access to the property limits functionality and leads to weirdness like the example above. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] FW: Functionality request/proposal

2013-01-15 Thread Steve Clay
shows parse errors. Enforcing syntax is a good thing; Javascript's auto semicolon insertion has led to a staggering amount of wasted energy in bug fixing, understanding the feature, arguments about it, and altering code between the two styles. It was a terrible, terrible idea. Steve Cl

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 : parent::$foo Issue

2013-01-10 Thread Steve Clay
Why we must have parent property access at all? What's the use case and how do other langs do it? Am I right to say there is no "parent property", this would just call the parent's [gs]etter using the same underlying property value? Steve -- http://www.mrclay.org/ On Jan

Re: [PHP-DEV] [RFC] Alternative typehinting syntax for accessors

2013-01-08 Thread Steve Clay
what we're trying to do. Could we not just make it obvious?: public Foo|null $foo; Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [RFC] Alternative typehinting syntax for accessors

2013-01-05 Thread Steve Clay
fields directly from the constructor without going through property setters. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [RFC] Alternative typehinting syntax for accessors

2013-01-05 Thread Steve Clay
rty can be set *back* to NULL (outside the setter). We could just make the most common case the default behavior. Otherwise the author must provide the signature of the setter with/without "= null". Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-05 Thread Steve Clay
ls. In this model, I think infinite-loop-causing recursions would be easier to spot. If absolutely necessary we could always throw a fatal error whenever a getter was called twice in the same call chain. Steve AFAICT C# strictly separates fields ("properties" in PHP) and properties

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-05 Thread Steve Clay
de. What functionality possible in the RFC would be lost by this? Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [RFC] Alternative typehinting syntax for accessors

2013-01-04 Thread Steve Clay
Would the following two be exactly functionally equivalent? public Foo $foo; public $foo { get; set(Foo $value) { $this->foo = $value; } } We should also consider how an author would allow type-hinted properties to accept NULL as a new value, in both proposals. Steve -- h

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-03 Thread Steve Clay
verly complex properties (like document.cookie) that should really be separate objects. Lets not do that. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-03 Thread Steve Clay
es is always proxied. Accessors are not required to use the property value, but it always exists. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] zip stream looping issue

2013-01-03 Thread Steve Hanselman
Before I look into this further, can someone confirm that fopen on a zip stream should return something other than a null? I've a zip called test.zip which contains 5 files, a.txt,b.txt,c.txt,d.txt and yes, e.txt The zip is valid and can be unzipped using unzip on linux. Running the follow

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-03 Thread Steve Clay
mber that traditional syntax only useful for shadow prop. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-03 Thread Steve Clay
t I am getting at here is that shadowing seems to create very tricky hidden state that can lead to very bad error situations when using public APIs without knowledge of internal implementation. Again, the problem is not shadowing (not even in use here) but really general information hiding. You c

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-02 Thread Steve Clay
with real accessors. Probably a good thing :) One more concern, sorry if it was covered already: will case-insensitivity of methods mean you can't define getters for both $foo and $Foo? Steve -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-02 Thread Steve Clay
der: class Foo { public $a { get { $this->a = 1; return 2; } } public $b { get { return $this->a; } } } $foo = new Foo; $foo->a; // 2 (but shadowed property is 1) $foo->b; // 1 or 2? Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-02 Thread Steve Clay
t;Hours); $t->Hours; // null isset($t->Hours); // false Note these also work as expected when using the default get/set implementations. Of, course, my implementations don't actually *work* because you can't call an accessor from an accessor... Steve Clay -- http://www.mrcla

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-02 Thread Steve Clay
should not. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [PHP-RFC] Property Accessors 1.2 for Final Review before Vote

2013-01-02 Thread Steve Clay
method names like __setSeconds. 1. Are these names visible via get_class_methods() / method_exists() / is_callable()? 2. Inside an accessor, what do __FUNCTION__ and __METHOD__ evaluate as? 3. What happens if a class/subclass contains a regular method __setSeconds? Steve Clay -- http

Re: [PHP-DEV] Call closure stored as object property directly without use of temporary variable

2012-12-08 Thread Steve Clay
ion avoids PHP's dilemma of distinguishing prop/method, but fails because you can't execute an expression: ($o->func)(); Similarly if $a is a Closure, $a() works but ($a)() fails. If these could be made to work, would it break BC? And *should* they be made to work? Steve Clay -- h

Re: [PHP-DEV] RFC: ext/mysql deprecation

2012-11-16 Thread Steve Clay
ne writing *new* code will see that feedback immediately. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] [RFC] Property Accessors v1.2 : Internal Accessor Method Visibility / Callability

2012-10-26 Thread Steve Clay
ethods are *purposefully designed* to be implemented by the user, I expect users to try this and, if it works, release code with it. * I assume one could use them as regular methods? * call_user_func([$foo, '__getpropName']); * $foo->{"__get$propName"} I apologize if these

Re: [PHP-DEV] Re: internals Digest 20 Oct 2012 09:49:39 -0000 Issue 2820

2012-10-20 Thread Steve Clay
s and getters: $color = new Color(255, 0, 0); $color->r; Steve -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] RFC: alternative callback syntax

2012-09-19 Thread Steve Clay
rror: syntax error, unexpected 'callable' (T_CALLABLE) This could work, and it makes sense to me at least. $cb = {mysql_real_escape_string}; $cb = &{mysql_real_escape_string}; I'll add these possibilities to the RFC soon. Steve -- http://www.mrclay.org/ -- PHP Intern

Re: [PHP-DEV] RFC: alternative callback syntax

2012-09-19 Thread Steve Clay
bj->doSomething; The last looks like a reference to a property, though having verb method names would help distinguish. Not sure if the ambiguity would make this difficult to implement. Some other ideas: $cb = (callable) $obj->bar; $cb = callable $obj->bar; $cb = callable::$obj->

Re: [PHP-DEV] RFC: alternative callback syntax

2012-09-19 Thread Steve Clay
On 9/19/12 9:26 AM, Ivan Enderlin @ Hoa wrote: callable is already a reserved word (T_CALLABLE). Oh, good. It's not listed here http://php.net/manual/en/tokens.php Steve -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit:

Re: [PHP-DEV] RFC: alternative callback syntax

2012-09-19 Thread Steve Clay
On 9/19/12 2:37 AM, Sebastian Krebs wrote: 2012/9/19 Steve Clay mailto:st...@mrclay.org>> https://wiki.php.net/rfc/__alternative_callback_syntax reason I like 'Classname::class' for classes) I don't like, that functions will look like classes with a static pro

[PHP-DEV] RFC: alternative callback syntax

2012-09-18 Thread Steve Clay
ing ::keyword provided a better path to BC, and more attractive/meaningful syntax. P.P.S. I'm unaware if it's customary to throttle the release of RFCs, so I apologize for hogging any attention away from those under discussion. Steve Clay -- http://www.mrclay.org/ -- PHP Internals - P

Re: [PHP-DEV] RFC: Implementing a core anti-XSS escaping class

2012-09-18 Thread Steve Clay
naming matters, and *option* constants should not be used to wildly change behavior. Filter has already gone down this road--I doubt the value added by having a second, much more verbose way to call htmlspecialchars()--but I don't see why we must continue down that path. Steve -- http:

Re: [PHP-DEV] RFC: Implementing a core anti-XSS escaping class

2012-09-18 Thread Steve Clay
nt here, and with all the contexts we have to consider the names in the RFC don't scream what to use them for. Steve -- http://www.mrclay.org/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] About CVE-2012-0831 (magic_quotes_gpc remote disable vulnerability?)

2012-02-16 Thread Steve Beattie
behavior that J David reported, where he configured it *off*, but saw magic quoting still happening. It would be great to get comments on the patch provided by Ondřej in the bug report to know if it's the correct fix, and if so, get it committed to the 5.3 branch. Thanks. -- Steve Beattie http://NxNW.org/~steve/ signature.asc Description: Digital signature

[PHP-DEV] Debugging internal array corruption

2011-12-21 Thread Steve Hanselman
Hi all, Looking for a pointer on internals layout. I've an issue whereby php is seg faulting during a print_r, I can see that the corruption has already occurred in the hash at the start of the print_r, so now I want to set a breakpoint at the point that an entry is added to an array (so I ca

[PHP-DEV] SVN Account Request: sbeattie

2010-12-17 Thread Steve Beattie
Ubuntu security contact, as requested. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Re: What is still missing from windows builds ...

2010-08-19 Thread steve
Perhaps since http://pecl4win.php.net/ has been down for several years, it is time to just remove all the references to it. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Annoucing PHP 5.4 Alpha 1

2010-08-18 Thread steve
> With Traits, interned strings/hash table optimizations, array deref., Can we bring the strings/hash table optimizations to PHP 5.3.x please? -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] Re: APC in trunk

2010-06-22 Thread steve
It should be included by default AND enabled by default AND all the test suites should be run in that configuration. It seems crazy to me to test against a configuration that no one is expected to run. BTW: Can someone bump up the version of APC and do a release so some more recent fixes find thei

Re: [PHP-DEV] About optimization

2010-02-02 Thread steve
On Sat, Jan 30, 2010 at 9:37 PM, Richard Lynch wrote: > On Sat, January 23, 2010 2:26 pm, steve wrote: >> The guys at Zend muscled in to change the culture as well, and have > > I'm not sure that's a fair representation of the historical reality of > how Zend came in

Re: [PHP-DEV] About optimization -- What every programmer should know about memory

2010-01-26 Thread steve
/ You can look at the part about what programmers can do: http://lwn.net/Articles/255364/ And don't forget about the tools like valgrind and perfctr. Also oprofile, pagein, pfmon, callgrind. iam On Mon, Jan 25, 2010 at 4:59 PM, steve wrote: >> This isn't about server costs.  It i

Re: [PHP-DEV] About optimization

2010-01-25 Thread steve
> This isn't about server costs.  It is about choosing the right tool for > the right part of the job.  A Javascript library for the client-side > frontend, PHP for the server-side frontend, C/C++ for your middle-layer > and an appropriate datastore behind it all and you can build amazing > things

Re: [PHP-DEV] About optimization

2010-01-23 Thread steve
>> I doubt anyone does I1/D1/L2 cache profiling for PHP. > > I did a little bit of CPU cache profiling of PHP using oprofile, more > out of curiosity than anything. It was a couple of years ago now. > > http://wikitech.wikimedia.org/view/Oprofile > > But you don't need oprofile, you can make change

Re: [PHP-DEV] About optimization

2010-01-22 Thread steve
> Having 8 cores with only 1G of ram would be a weird server config. A single socket quad-core with hyper-threading and 2GB RAM for a 32-bit webserver is not weird. Not everyone is Yahoo where you can just throw money around. > For Mr. "everyone has 8GB of memory and tiny little data sets" Lerdor

Re: [PHP-DEV] Re: [PHP-WEBMASTER] Re: wiki/windows.php.net system update

2010-01-21 Thread steve
Yeah, pecl for windows was last working in 2008 -- a couple of years ago. Time flies... Pierre, could you build a php_memcache-5.2-nts-Win32-vc9. It would be much appreciated! Thanks, iamstever On Sun, Jan 10, 2010 at 8:24 AM, Pierre Joye wrote: > On Sun, Jan 10, 2010 at 4:37 PM, pan wrote: >>

[PHP-DEV] Re: [PHP] Re: PHP 5.3.0 Released!

2009-08-03 Thread steve
On Thu, Jul 2, 2009 at 3:54 AM, Michael A. Peters wrote: > Nick Cooper wrote: >> >> Does anyone have any further information on the PECL Binaries for 5.3, >> will >> they be released? > > I don't, but I suspect it is just a matter of compile + test. We develop on Windows and deploy on Linux, so wi

Re: [PHP-DEV] PHP 5.2.9RC1 Testing

2009-02-05 Thread steve
On Thu, Feb 5, 2009 at 4:10 PM, Pierre Joye wrote: > Windows binaries are now available in the usual place: > > http://windows.php.net/qa/ Wouldn't by chance be able to add APC to that? It has been 13 months since APC was built for Windows. (Never for a NTS version, as far as I know, but would be

Re: [PHP-DEV] Re: PHP 5.2.7RC1 Testing

2008-10-22 Thread steve
The more that gets moved from php into pecl, the more many of us rely on pecl builds to test php. Specificly in regards to 5.3 and 6.0... On Fri, Oct 17, 2008 at 8:52 AM, Pierre Joye <[EMAIL PROTECTED]> wrote: > hi, > > All references are now updated, in http://qa.php.net > http://bugs.php.net

RE: [PHP-DEV] str_getcsv

2008-10-21 Thread Steve Hanselman
body else is doing this then I'm happy to build a diff, What's involved in getting a commit account for CVS or is it easier to just email a diff set to somebody (in which case, who?) Steve The information contained in this email is intended for the personal and confidential use

RE: [PHP-DEV] str_getcsv

2008-10-20 Thread Steve Hanselman
If it's not stupid question, what is the main branch for? Presumably the other branches aren't just branched from this at a point in time or we'd have this in there. High? Nah, just chilled after a glass or two of wine. Can't beat a good corporat

[PHP-DEV] str_getcsv

2008-10-20 Thread Steve Hanselman
Can anybody suggest a reason why this has never moved from main to php_5_2 or php_5_3? It was added to MAIN in dec '06 Steve The information contained in this email is intended for the personal and confidential use of the addressee only. It may also be privileged information. If you ar

Re: [PHP-DEV] PHP 5.3 Windows builds, pdo_sqlite

2008-09-25 Thread steve
Using the non-VC9 nts build (and after erasing sqlite files so they get created from scratch) I can have PDO sqlite create a table, and add records, but not delete records (SQLSTATE[HY000]: General error: 1 SQL logic error or missing database). Reverting to 5.2.x works again. We use a cache layer t

Re: [PHP-DEV] Re: [PHP] PHP 5.3.0alpha2

2008-09-25 Thread steve
OK, I finally went to do it and this link doesn't work: PHP 5.3.0alpha2 VC9 x86 http://downloads.php.net/pierre/php-5.3.0alpha2-nts-Win32-VC9.zip On Thu, Sep 4, 2008 at 5:23 AM, Johannes Schlüter <[EMAIL PROTECTED]> wrote: > On Wed, 2008-09-03 at 23:36 -0700, steve wrote: >&g

Re: [PHP-DEV] PHP Suspendable requests for Apache

2008-09-25 Thread steve
>> Not true.. Tomcat supports comet, and it runs on APR. Yes, the thread pool >> is small, but there is always a solution. The idea is to return the thread >> back to Apache's thread pool while waiting for an event: >> http://tomcat.apache.org/tomcat-6.0-doc/aio.html > > Then convince the Apache de

Re: [PHP-DEV] Re: [PHP] PHP 5.3.0alpha2

2008-09-03 Thread steve
> Try with IIS7 + FCGI, it is _fast_ :) It's a "same-across-platforms" thing. Mostly to do with the fact we use mod-rewrite. :( >> PHP is so much slower on windows, though a lot of it has to do with >> file handling, a Windows specific slowdown I guess. > > That's something I really to fix for 5.

Re: [PHP-DEV] Re: [PHP] PHP 5.3.0alpha2

2008-09-03 Thread steve
Good to know. And it makes it easier to use the Apache builds from http://apachelounge.com. On Wed, Sep 3, 2008 at 9:06 PM, Andi Gutmans <[EMAIL PROTECTED]> wrote: > Btw, contrary to what many believe, 32bit PHP tends to perform better > than 64bit PHP. > So unless there's a really good reason why

Re: [PHP-DEV] Re: [PHP] PHP 5.3.0alpha2

2008-09-03 Thread steve
> None yet, I still have to create some. Apache may provide some when > they have began the move to VC9. VC9 Apache builds can be fetched from > http://apachelounge.com, they are known to work very well. Hmm.. that is a good link. I had forgotten about them. Ideally, I'd like to get a all 64bit se

[PHP-DEV] Re: [PHP] PHP 5.3.0alpha2

2008-09-03 Thread steve
That's great! I like all the different builds. Two things that pop out: 1) What are some recommended non-official builds of Apache2 in x64? and 2) Will there be PECL builds also? On Tue, Sep 2, 2008 at 3:27 PM, Lukas Kahwe Smith <[EMAIL PROTECTED]> wrote: > Hello! > > Johannes has packed PHP 5.3.0

Re: [PHP-DEV] TracingPHP

2008-08-25 Thread steve
Has anyone had success compiling PHP with LLVM? On Mon, Aug 25, 2008 at 10:51 AM, Sebastian Bergmann <[EMAIL PROTECTED]> wrote: > steve schrieb: >> With all the news of TraceMonkey bringing an order of magnitude speed >> increase to JavaScript, it was only a matter o

Re: [PHP-DEV] TracingPHP

2008-08-25 Thread steve
I know llvm allows nicer licensing such that the runtime can be embeded -- is this what this extension does? On Mon, Aug 25, 2008 at 10:51 AM, Sebastian Bergmann <[EMAIL PROTECTED]> wrote: > steve schrieb: >> With all the news of TraceMonkey bringing an order of magnitude speed

[PHP-DEV] TracingPHP

2008-08-25 Thread steve
With all the news of TraceMonkey bringing an order of magnitude speed increase to JavaScript, it was only a matter of time before someone brought up (again) the idea of doing JIT for PHP, so I'll take the flack and let it be me. The part that knocked me over was the "work began just about 60 days a

[PHP-DEV] Does anyone have a copy of APC.dll that is newer than the one from January for NTS Windows?

2008-07-25 Thread steve
Does anyone have a copy of APC.dll that is newer than the one from January for not-thread-safe Windows? Would be much obliged, thank you! -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] PHP 5.2.6RC2 Released

2008-03-12 Thread steve
> Windows binaries should become available in short order as well. What happened to that? -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] CVS Account Request: stevseea

2007-12-17 Thread Steve Seear
I have PHPT tests to contribute. I am working with others who contribute tests including Raghu Kumar and Zoe Slattery. -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] How to integrate PHP with my homegrown server

2007-08-24 Thread Steve Francisco
Daniel Brown wrote: On 8/24/07, Steve Francisco <[EMAIL PROTECTED]> wrote: [snip!] If the command line doesn't have a way to cause $_GET to be populated, then what other way of invoking PHP could I use? -- Steve Steve, You'd need to transpose the $_GET variables fro

[PHP-DEV] How to integrate PHP with my homegrown server

2007-08-24 Thread Steve Francisco
Goodbye and in mypage.php I do something like this: $echo $_GET["parm1"]; then how do I test this via the PHP command line? If the command line doesn't have a way to cause $_GET to be populated, then what other way of invoking PHP could I use? -- Steve -- PHP Internals - PHP Run

[PHP-DEV] phar & apc

2007-05-06 Thread steve
Before reading the thread on the idea of a PHP 5.3 branch, I had never heard of phar, so please excuse my neophyte questions, but I couldn't find a reference with the information. On a single website application environment (as opposed to a shared host type of thing), what are the performance char

Re: [PHP-DEV] PHP Just-In-Time Compiler

2007-03-08 Thread steve
Has anyone tried this or know of anyone who is interested in implementing this for the Zend Engine? http://www.php-mag.net/magphpde/magphpde_article/psecom,id,729,nodeid,21.html I'd settle for faster method dispatching, but JIT would be great. Can always use the speed. :) The idea behind PHP

[PHP-DEV] Re: 4.4.6RC1

2007-02-21 Thread steve
Is there a list of fixes so far in this release? I've found a crashing bug that came in 4.4.5 that was not in 4.4.4, and related, I believe, to some string processing. I'm narrowing it down right now. On 2/20/07, Derick Rethans <[EMAIL PROTECTED]> wrote: Hello! there is a critical issues in PHP

Re: [PHP-DEV] mod_fast_apache, FastCGI, and mysqli

2007-02-07 Thread steve
Thanks! That is a blast from the past! I never got it working properly, and since using PHP in FastCGI mode has eliminated the problem by 80%+, hopefully I won't have to revisit it. But thanks again! I never know! -s On 2/7/07, Reinis Rozitis <[EMAIL PROTECTED]> wrote: > Christopher Jones wrote

Re: [PHP-DEV] mod_fast_apache, FastCGI, and mysqli

2007-02-07 Thread steve
actually know a little bit about running PHP in extremely high-traffic situations. And thank you for your insights!!! Particularly if you have advice on scaling COMET type connections with data from PHP. That is a whole other story... steve -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] mod_fast_apache, FastCGI, and mysqli

2007-02-07 Thread steve
connections which in mysql I guess would be sleeping connections. Don't like the one thread per connection system currently, though it has not presented any deal-breaking problems. Well, not yet anyway. :) On 2/6/07, Lukas Kahwe Smith <[EMAIL PROTECTED]> wrote: Christopher Jones wrote: &g

[PHP-DEV] mod_fast_apache, FastCGI, and mysqli

2007-02-06 Thread steve
odule to php's source b) make the config options easy for the basic user c) included in future distributions d) make default at a later point e) bring back persistent connections f) remove thread safe code??? maybe crazy idea -steve-- -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

  1   2   >