Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:114945
MIME-Version: 1.0
References: <CAFv4g+F-7F7o6va5wCrojKe+Uysx2Ec3H4yV_mUZYEyNm3MkdQ@mail.gmail.com>
 <CAFv4g+GYwH-nQ8bLGbm=ThARghGUG5hMpw7W5SjMnSPMTom7+g@mail.gmail.com>
 <CAFv4g+GA9y62phk1TB8Z9EakpAXwmOa5pGxT1pdBVZwkCNxsVA@mail.gmail.com> <f9c70ab3-3218-6fc0-06b3-4041f3f78cd4@processus.org>
In-Reply-To: <f9c70ab3-3218-6fc0-06b3-4041f3f78cd4@processus.org>
Date: Fri, 18 Jun 2021 12:45:10 +0200
Message-ID: <CAC5V6gi_U-ZHHbYj_MvOw_ifp5hCwnQt6+A3pmS==UDAKO74Yw@mail.gmail.com>
To: Pierre <pierre-php@processus.org>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary="00000000000047191605c508053b"
Subject: Re: [PHP-DEV] Re: [RFC] is_literal
From: guilliam.xavier@gmail.com (Guilliam Xavier)

--00000000000047191605c508053b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Jun 18, 2021 at 12:10 PM Pierre <pierre-php@processus.org> wrote:

> Le 18/06/2021 =C3=A0 08:00, Craig Francis a =C3=A9crit :
> > As there=E2=80=99s been no issues raised with supporting integers, and =
doing so
> > will help adoption, the implementation will be updated to allow them.
> >
> > Now to choose the name, with the options is_known() from Joe and
> > is_trusted() from Moritz:
> >
> > https://strawpoll.com/bd2qed2xs
> >
> > Keep in mind it might also become a dedicated type in the future.
> >
> > Craig
>
> If I'm understanding this correctly, what you call a literal value is a
> statically written and compiled string, which doesn't originate from a
> user given value, but was hardcoded at some point. If so, even if the
> primary use is of course for security concerns, the realty of what it
> does is not, it's mostly about how a certain variable was defined /
> assigned. How about is_static() or is_value_static() ? Or even
> is_statically_defined() ? There's many options in this path.
>

IIUC, with the addition of integers, the function will return true for e.g.
`'SELECT * FROM foo LIMIT ' . (int)$limit` even if $limit doesn't come from
a "static" value (e.g. random_int() or even `$_GET['limit']`)

--=20
Guilliam Xavier

--00000000000047191605c508053b--