Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:105443
MIME-Version: 1.0
References: <CAFPFaMJEn=gjk5jAAxR2bF=4Mt3r0FJCm6mbOCReOmyybtAkkg@mail.gmail.com>
 <CAOv67gsiva80KEhw7D2N2qKCz0gZvza30EDL7SZoJRPFsGoROA@mail.gmail.com>
 <0ec42fa9-77d1-a203-8425-e72fdd5071f3@korulczyk.pl> <06473788-a34b-f041-36e6-31d19d8dda4c@cubiclesoft.com>
 <59cafbfb-2bb0-468c-458f-74bcac780e0f@korulczyk.pl> <004c01d4f09f$880ac320$98204960$@roze.lv>
 <CAFPFaM+QwXpm-mfwRtbT2sPB_C-9wvPELVTV5dHvizgmfUjMnw@mail.gmail.com>
In-Reply-To: <CAFPFaM+QwXpm-mfwRtbT2sPB_C-9wvPELVTV5dHvizgmfUjMnw@mail.gmail.com>
Date: Thu, 25 Apr 2019 12:03:47 +0200
Message-ID: <CAEPJduneTYwPOOPppxgRP+Zx00wLwgcwkao0jvZiwe7MJz3cHQ@mail.gmail.com>
To: "G. P. B." <george.banyard@gmail.com>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="000000000000db6338058757ef1f"
Subject: Re: [PHP-DEV] [RFC] [VOTE] Deprecate PHP's short open tags
From: kontakt@beberlei.de (Benjamin Eberlei)

--000000000000db6338058757ef1f
Content-Type: text/plain; charset="UTF-8"

On Wed, Apr 24, 2019 at 1:29 PM G. P. B. <george.banyard@gmail.com> wrote:

> Hello Internal,
>
> The two weeks of voting have now ended.
> The results are 38 for and 18 against (total 56) for the primary vote to
> deprecate PHP's short open tag in PHP 7.4.
> This passes in favor with 68%.
>
> The results are 42 for and 15 against (total 57) for the secondary vote to
> remove PHP's short open tag in PHP 8.
> This passes in favor with 74%.
>
> Thanks for everyone who voted on this issue.
>
> Best regards
>
> George P. Banyard
>

The RFC doesn't mention to much details on the exact implementation of this
removal, but to avoid the potential security nightmare of <? code to
suddenly be printed to screens when people upgrade to 8.0 I would suggest
(props to Bob who mentioned this idea) that we at least keep the INI option
indefinitely and when set to On always cause a fatal error in RINIT with an
error message that mentions the security implications of disabling it and
potentially linking to a PHP documentation page that offers solutions on
how to migrate. This page could also be linked in the deprecation error
message in 7.4


>
> >
>

--000000000000db6338058757ef1f--