Re: [PHP-DEV] [RFC] First-class callable syntax

2021-05-21 Thread Nicolas Grekas
Thank you all for your efforts, I think we're almost there and that PFA would be a really great and useful addition to the language. Le jeu. 20 mai 2021 à 21:38, Larry Garfield a écrit : > On Thu, May 20, 2021, at 10:55 AM, Guilliam Xavier wrote: > > On Thu, May 20, 2021 at 5:12 PM Nikita Popov

Re: [PHP-DEV] [RFC] First-class callable syntax

2021-05-21 Thread Nicolas Grekas
Sorry for self-reply, this needs some clarifications :) Le ven. 21 mai 2021 à 09:17, Nicolas Grekas a écrit : > Thank you all for your efforts, I think we're almost there and that PFA > would be a really great and useful addition to the language. > > Le jeu. 20 mai 2021 à 21:38, Larry Garfield

Re: [PHP-DEV] [RFC] First-class callable syntax

2021-05-21 Thread Rowan Tommins
On 20/05/2021 23:58, David Gebler wrote: I think this is very sensible, I can only really say I'd rather have Nikita's proposal land in 8.1 and PFAs in 9.0 done right than have PFAs in 8.1 but in a way which is confusing, ambiguous or problematic for users, or not covering reasonable expected use

Re: [PHP-DEV] [RFC] First-class callable syntax

2021-05-21 Thread Andreas Leathley
On 20.05.21 21:35, Larry Garfield wrote: There's been a lot of rapid iteration, experimentation, and rejection. The most recent alternatives are this one from Levi: https://gist.github.com/morrisonlevi/f7cf949c02f5b9653048e9c52dd3cbfd And this one from me: https://gist.github.com/Crell/ead27e73

Re: [PHP-DEV] [RFC] First-class callable syntax

2021-05-21 Thread Larry Garfield
On Fri, May 21, 2021, at 2:52 AM, Nicolas Grekas wrote: > Sorry for self-reply, this needs some clarifications :) > > Le ven. 21 mai 2021 à 09:17, Nicolas Grekas > a écrit : > >> There's been a lot of rapid iteration, experimentation, and rejection. > >> The most recent alternatives are this on

[PHP-DEV] Re: Injection vulnerabilities

2021-05-21 Thread Craig Francis
Hi Internals, To follow up on yesterdays post [1]... We *could* try to teach programmers to never make a mistake (yep, you can stop laughing). Take the previous example: $html = ""; We might be able to teach everyone to always quote their attributes (or use a different form of encoding):

[PHP-DEV] Subdomain .people partially broken

2021-05-21 Thread Daniel Lima
Hi people, since yesterday I can't access the subdomain https://people.php.net/ it returns the message: "Something happened to main". Does anyone know if any problems have been reported? Sincerely, Daniel Rodrigues(geekcom).

[PHP-DEV] Using clang-analyzer with PHP: experiences?

2021-05-21 Thread Calvin Buckley
Hi internals@, I maintain an extension and I suspect there are some issues in the code. As such, I’ve been trying various tools to try to make it easier to catch the issues. (For the curious: I’ve tried *San, which I feel doesn’t work very well unless you /totally control/ the entire stack, whi

Re: [PHP-DEV] Using clang-analyzer with PHP: experiences?

2021-05-21 Thread Levi Morrison via internals
On Fri, May 21, 2021 at 1:01 PM Calvin Buckley wrote: > > Hi internals@, > > I maintain an extension and I suspect there are some issues in the code. As > such, I’ve been trying various tools to try to make it easier to catch the > issues. (For the curious: I’ve tried *San, which I feel doesn’t

Re: [PHP-DEV] Using clang-analyzer with PHP: experiences?

2021-05-21 Thread Calvin Buckley
> On May 21, 2021, at 4:48 PM, Levi Morrison > wrote: > > Just to check: are you setting the environment variable USE_ZEND_ALLOC > to 0? This causes the engine to use malloc: > https://heap.space/xref/PHP-7.4/Zend/zend_alloc.c?r=600402d9#2738. > > For what it's worth, I was recently annoyed _

[PHP-DEV] Re: Injection vulnerabilities

2021-05-21 Thread Craig Francis
Fine, I'll finish with this... We know that HTML [3] and SQL [4] should be written by the programmer, with user data being handled *separately*. The same applies to OS Commands: $command = 'rm -rf ?'; Because we're using parameters (to escape the user values properly), we don't need to consid