Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:105611
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=turbo-smtp; d=php.net;
	h=Received:Received:X-TurboSMTP-Tracking:X-Gm-Message-State:X-Google-Smtp-Source:X-Received:MIME-Version:References:In-Reply-To:From:Date:X-Gmail-Original-Message-Id:Message-ID:Subject:To:Cc:Content-Type;
	b=cBtBfI4QyYbVKf80fpxihHdH+53aF2nk+rPBv69op2a6HAJp3Ykz6U/zHcfCvl
	A/TXiqz1XbZ52tnTCu+7Gne0JvxC2x65nRSxOquOMfbBc3GS1fWdysDyFJnOOf+z
	hLf8aqUBLfa0UpggnEFcY+KGrUn8zwQ6qSwwhs5RfFUeg=;
MIME-Version: 1.0
References: <CAF+90c-4-R4SYY_AAL679ZYBn2QAZTYAGXH6E6Bz1hYGN=MFcA@mail.gmail.com> <CAOwTYAv_kmgqoLvqqsp04ajh0RyPTxqGg3z_zBTx6hX_ydTxrw@mail.gmail.com> <CAOkcCt_jEbzwX3ukj1dreL910Effz-vBo8YJGQ5iN=5tkvFJCg@mail.gmail.com>
In-Reply-To: <CAOkcCt_jEbzwX3ukj1dreL910Effz-vBo8YJGQ5iN=5tkvFJCg@mail.gmail.com>
Date: Tue, 7 May 2019 13:38:17 +0300
Message-ID: <CAJHtznwQf_tv_0TNKPMeQQ2nXrB6WgDCY6jS1y16Oafvk7SkTQ@mail.gmail.com>
To: Gert <gertp93@gmail.com>
Cc: Joe Watkins <krakjoe@gmail.com>, Nikita Popov <nikita.ppv@gmail.com>,  PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000043591f058849d177"
Subject: Re: [PHP-DEV] open_basedir?
From: zeev@php.net (Zeev Suraski)

--00000000000043591f058849d177
Content-Type: text/plain; charset="UTF-8"

On Tue, May 7, 2019 at 1:25 PM Gert <gertp93@gmail.com> wrote:

> Hello,
>
> If the plan is to remove it in 8.0, then i'd say its beneficial to already
> deprecate it in 7.4. This will give users an earlier warning that these
> upgrades need to happen.


We should definitely deprecate it before removing it, if we decide to
remove it.  This has been our modus operandi for years and it's a good one
- especially here, where folks who rely on it for (even some level of)
security would have a lot of work on their hands to come up with a
different solution for isolation.

Zeev

--00000000000043591f058849d177--