Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:114832
Openpgp: id=199F9DFEF6FFBAFD
MIME-Version: 1.0
Date: Fri, 11 Jun 2021 10:22:46 -0700
Message-ID: <CACwt+Jda8LOQfNgh4mMg+TESZy3biAFuqicLM85hs92FFtmEsQ@mail.gmail.com>
To: PHP Development <internals@lists.php.net>
Content-Type: text/plain; charset="UTF-8"
Subject: Zend Engine License in PHP source code
From: patrickallaert@php.net (Patrick ALLAERT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Today I sent 2 e-mails to license@zend.com, one from
<patrickallaert@php.net> (signed), one from <patrick.allaert@gmail.com>
with the following content:

===== START EMAIL =====
Hello,

I have found a few issues with the header we usually found in PHP's source
code as well as with the license itself:

   +----------------------------------------------------------------------+
   | Zend Engine |
   +----------------------------------------------------------------------+
   | Copyright (c) Zend Technologies Ltd. (http://www.zend.com) |
   +----------------------------------------------------------------------+
   | This source file is subject to version 2.00 of the Zend license, |
   | that is bundled with this package in the file LICENSE, and is |
   | available through the world-wide-web at the following url: |
   | http://www.zend.com/license/2_00.txt. |
   | If you did not receive a copy of the Zend license and are unable to |
   | obtain it through the world-wide-web, please send a note to |
   | license@zend.com so we can mail you a copy immediately. |
   +----------------------------------------------------------------------+

Problem 1: The license is not available at the provided address.

The "LICENSE" file under php source's Zend directory stipulates: "Copyright
(c) 1999-2006 Zend Technologies Ltd. All rights reserved."

Problem 2: Does it mean that the copyright isn't covering the last 15
years?

Problem 3: Point #5 and #6 stipulates:
  5. Redistributions of any form whatsoever must retain the following
     acknowledgment:
     "This product includes the Zend Engine, freely available at
http://www.zend.com"

6. All advertising materials mentioning features or use of this
     software must display the following acknowledgment:
     "The Zend Engine is freely available at http://www.zend.com"

However that is not correct, the Zend Engine is not freely available on
Zend's website.

What do you suggest to solve those issues?

Kind regards,
Patrick Allaert
===== END EMAIL =====

In both cases, I received the same direct error answer from distant mail
server with:

550 5.4.1 Recipient address rejected: Access denied. AS(201806281)
[DM3NAM02FT011.eop-nam02.prod.protection.outlook.com]

This means that in addition to the 3 problems mentioned in the above
e-mail, there are additional ones:

Problem 4: There is no way to get a copy by e-mail as mentioned in the
copyright header:
"If you did not receive a copy of the Zend license and are unable to obtain
it through the world-wide-web, please send a note to license@zend.com so we
can mail you a copy immediately."

Problem 5: There is no way to get a written permission from Zend as
stipulated in the LICENSE file:
"  3. The names "Zend" and "Zend Engine" must not be used to endorse
     or promote products derived from this software without prior
     permission from Zend Technologies Ltd. For written permission,
     please contact license@zend.com."

I'm afraid this is material to make jokes from.

What can we do to improve that situation?

Sorry for bringing a non technical topic to this ML.

Cheers,
Patrick

- --
- -Patrick
-----BEGIN PGP SIGNATURE-----
Version: FlowCrypt Email Encryption 8.0.7
Comment: Seamlessly send and receive encrypted email
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=4ajl
-----END PGP SIGNATURE-----