Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:117373
Message-ID: <73550eae-370d-115f-e440-4889e42dbc74@processus.org>
Date: Fri, 18 Mar 2022 15:09:03 +0100
MIME-Version: 1.0
Content-Language: en-US
To: Chase Peeler <chasepeeler@gmail.com>,
 Theodore Brown <theodorejb@outlook.com>
Cc: Tobias Nyholm <tobias.nyholm@gmail.com>,
 Ilija Tovilo <tovilo.ilija@gmail.com>,
 PHP internals <internals@lists.php.net>
References: <CAPyj-LCXYjsjtDr1zPmH6t37pQS7aeGACG6kCex=fnsEJmNmVg@mail.gmail.com>
 <CADyq6sJP9A2UaLs5v8qJutNoekUfA1eM0gCod=9zEXhxctZppA@mail.gmail.com>
 <4AC60E84-B2AD-43F4-9B72-92604FC7BD41@gmail.com>
 <BN7PR05MB4033507F8061F8EF2288B483DE139@BN7PR05MB4033.namprd05.prod.outlook.com>
 <CAPKYkKzM6b6T+zxcmNsscgd8BFBD8v480+Z9bduEFYRZmhXdUw@mail.gmail.com>
In-Reply-To: <CAPKYkKzM6b6T+zxcmNsscgd8BFBD8v480+Z9bduEFYRZmhXdUw@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [PHP-DEV] [RFC][Under discussion] Arbitrary string interpolation
From: pierre-php@processus.org (Pierre)

Le 18/03/2022 à 15:02, Chase Peeler a écrit :
> On Fri, Mar 18, 2022 at 12:49 AM Theodore Brown <theodorejb@outlook.com>
> wrote:
>
>> On Thu, Mar 17, 2022 at 5:40 PM Tobias Nyholm <tobias.nyholm@gmail.com>
>> wrote:
>>
>>> On Thu, 17 Mar 2022, 23:27 Ilija Tovilo, <tovilo.ilija@gmail.com> wrote:
>>>
>>>> Hi everyone
>>>>
>>>> I'd like to start discussion on a new RFC for arbitrary string
>>>> interpolation.
>>>> https://wiki.php.net/rfc/arbitrary_string_interpolation
>>>>
>>>> Let me know what you think.
>>> That is a cool idea.
>>> But I am not a big fan of having code in strings.
>>> Wouldn’t this open the door to all kinds of new attacks?
>> Do you have an example of a new kind of attack this would allow?
>> The proposal doesn't enable interpolation of strings coming from
>> a database or user input - it only applies to string literals
>> directly in PHP code.
>>
>> Personally I'm really looking forward to having this functionality.
>> Just a couple days ago I wanted to call a function in an interpolated
>> string, and it was really annoying to have to wrap the function in a
>> closure in order to use it.
>>
>> If this RFC is accepted I'd be able to replace code like this:
>>
>>      $name = "Theodore Brown";
>>      $strlen = fn(string $string): int => strlen($string);
>>      echo "{$name} has a length of {$strlen($name)}.";
>>
>> with
>>
>>      $name = "Theodore Brown";
>>      echo "{$name} has a length of {$:strlen($name)}.";
>>
>>
> Out of curiosity, why not:
> $name = "Theodore Brown";
> echo "{$name} has a length of ".strlen($name).".";
>
> or even
> $name = "Theodore Brown";
> $len = strlen($name);
> echo "{$name} has a length of {$len}.";

I guess it's a matter of taste and convention.

Sometime, it make sense and it's just easier to just use string 
interpolation (for example with multiline templates).

Regards,

--

Pierre