Re: [PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/Zend/zend_execute_API.c trunk/Zend/zend_execute_API.c

2012-02-08 Thread Stas Malyshev
Hi! We're in violent agreement. I don't think it's the right approach at all — the right fix is to either fall back on ITIMER_REAL or come up with some other approach on OS X — but I'm trying to come up with a stopgap for 5.4.0 to make sure the test is XFAILed where we already know it fails as p

Re: [PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/Zend/zend_execute_API.c trunk/Zend/zend_execute_API.c

2012-02-08 Thread Ferenc Kovacs
On Wed, Feb 8, 2012 at 10:57 AM, Stas Malyshev wrote: > Hi! > > > We're in violent agreement. I don't think it's the right approach at >> all — the right fix is to either fall back on ITIMER_REAL or come up >> with some other approach on OS X — but I'm trying to come up with a >> stopgap for 5.4.

[PHP-DEV] Is it possible to create a php-general.zh maillist?

2012-02-08 Thread Laruence
Rasums: there are more and more php developers in china, and we all speak chinese, so could we create a maillist for chinese(php-general.zh), there are already general.es and bg. if yes, I will be volunteer to spread it, and also I will spend a lot of time to answer the question

[PHP-DEV] Re: Is it possible to create a php-general.zh maillist?

2012-02-08 Thread Laruence
Hi: after a deep thought, I think it is not suitable to create a mail list for chinese. there is a very strict examination in chinese against web content. and because the mailist will be public, so if someone sent some kind of `illegal` content to maillist, may cause the whole maillist block

Re: [PHP-DEV] When is PHP6 Beta going to be available ;)

2012-02-08 Thread Ondřej Surý
BTW php.ini-production and php.ini-development contains this line :) ; E_ALL             - All errors and warnings (includes E_STRICT as of PHP 6.0.0) -- Ondřej Surý -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP-DEV] When is PHP6 Beta going to be available ;)

2012-02-08 Thread Stas Malyshev
Hi! BTW php.ini-production and php.ini-development contains this line :) ; E_ALL - All errors and warnings (includes E_STRICT as of PHP 6.0.0) Thanks for noticing, fixed. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227 -- PHP In

[PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Ondřej Surý
This is very wrong to recommend: ; NOTE: If you are using the subdirectory option for storing session files [...] ;          find /path/to/sessions -cmin +24 | xargs rm because it is prone to '\n' attack. You can see the security considerations of GNU find. Much better would be: find /path/to/s

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Christopher Jones
On 02/08/2012 03:35 PM, Ondřej Surý wrote: This is very wrong to recommend: ; NOTE: If you are using the subdirectory option for storing session files [...] ; find /path/to/sessions -cmin +24 | xargs rm because it is prone to '\n' attack. You can see the security considerations of G

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Reindl Harald
Am 09.02.2012 00:35, schrieb Ondřej Surý: > Much better would be: > > find /path/to/sessions -cmin +24 -delete > or at least > find /path/to/sessions -cmin +24 -execdir rm "{}" \; (GNU find) > > The most error-prone way is something we cooked up in Debian: > > find /var/lib/php5/ -depth -minde

Re: [PHP-DEV] Security risk how to use find recommended in php.ini-*

2012-02-08 Thread Ondřej Surý
On Thu, Feb 9, 2012 at 00:40, Christopher Jones wrote: > Can you log a bug for this at https://bugs.php.net/ ? Done: https://bugs.php.net/bug.php?id=61020 On Thu, Feb 9, 2012 at 00:43, Reindl Harald wrote: > the main question is why here "cmin" is used instead "mmin"? > find /var/www/sessiondat