Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:121262 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 4918 invoked from network); 7 Oct 2023 12:20:52 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 7 Oct 2023 12:20:52 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 017721804B0 for ; Sat, 7 Oct 2023 05:20:52 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE, SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS15169 209.85.128.0/17 X-Spam-Virus: No X-Envelope-From: Received: from mail-pf1-f173.google.com (mail-pf1-f173.google.com [209.85.210.173]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sat, 7 Oct 2023 05:20:51 -0700 (PDT) Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-69fc829d7b1so217893b3a.1 for ; Sat, 07 Oct 2023 05:20:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1696681249; x=1697286049; darn=lists.php.net; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=xPCtDrPVMRQulh5lOsbEBjoFUi1yM7OIAdpQGrkmblo=; b=eJfS8MUh+xVO+CkodhG/ugjd1gPduoNwLxF0QElzfBuPb8AmUTyCVL34B9IK87Bv0W atuZKxOHorqA27BegqitaJe75k2/Qm0uHZhLp2ce3ebSB42+DZ/HaA3srUHqGi+OmCwh X6xDGDmtik+AsH55OKhjZ2shl+V8kqWRAMZaUiSB1ArnsdEczjkRMyeRykc0BqQhFeW0 IcFfi0Oo0Pmad8sB6NVHVQlb/Q1zGIr3Jbq6Mnc0IR9rSNSRQzC9q0hCvjAJe+UbTIxW DUR3W/om2RR+3hVfNgcvQqa1h+eI0tDPyYlYpbXiUYiDlk1Yjq1OzyGuG+12vd94ssIP +nCw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1696681249; x=1697286049; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=xPCtDrPVMRQulh5lOsbEBjoFUi1yM7OIAdpQGrkmblo=; b=lXTAwz4QvgaNMXtG1049Eb/P9ISoTsIBFYTiSqGd58Jx8JLuS0tLKSG+OqF97m3Q8E o8h6pAlaPfTk94XtZ4wRGVLLXwGnaWrkLSnSLCCcWHt+L6+2dBGavu+L1rbH83oA5/8g mbKd8DbdwHlpn+NZeQmG4tsdEgZcSQ/SaSVvX0GykWT0jzs6ffqpzssDPlJ7ebBsTzqq LsknFyDPprodG1AMV2SUQxRxgnlB0boFBuCdLGEApBRt0Ag5egLhSx9b5/WupJVOK9Mb yv460Sye4jkkfZxuE/RkYmQrsAZCoZTJcgP93Npz2pO/XM+azK3/v4ihse3T9ExsDqFW k8Fw== X-Gm-Message-State: AOJu0YwqxbEyUb3S1p5GwGD1E7kif/At9YFbIpJImF4JQHYklBjPBE3E /d5XXXTji6cRZw+jTJh8oYIScYElBgvZobkDgxnPz0NPiJcLSw== X-Google-Smtp-Source: AGHT+IGzGg6bzupJMFIVuuhyvkYdC3gZXJ/pE4Ll2B3mE+MGzivMPQWdK/b2fQbQxavhMDDXwOUB95srCkKLoVosWeM= X-Received: by 2002:a05:6a20:394d:b0:153:5366:dec1 with SMTP id r13-20020a056a20394d00b001535366dec1mr12882473pzg.15.1696681249340; Sat, 07 Oct 2023 05:20:49 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: Date: Sat, 7 Oct 2023 14:20:38 +0200 Message-ID: To: PHP internals Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] [RFC][Under discussion] RFC1867 for non-POST HTTP verbs From: tovilo.ilija@gmail.com (Ilija Tovilo) Hi Jakub >> https://wiki.php.net/rfc/rfc1867-non-post >> > > It should probably explicitly mention that it uses the same inis like max= _input_vars, max_file_uploads and max_multipart_body_parts. Indeed, I will mention that. Thank you. > It's kind of strange function as I can't decide where it should be placed= . I think it might be better as a stream function if it accepts only stream= . It means it could go to stream funcs and be called stream_parse_post_data= instead but not sure about. But not 100% sure about it as it doesn't exact= ly fit there. But seems better than html functions (where it's placed in th= e current PR) as it has nothing to do with html IMHO. TBH I have no idea how it landed there. When I created the PoC I just threw it in somewhere, but it's indeed an odd place. I'll try to find something better. I don't think stream is a great place, as the common case of not providing an input does not operate on streams, but on sapi_module.read_post() directly. I also don't think rfc1867.c is a great place as Ben suggested, because the invoked function is actually agnostic to the exact format. Instead, we use the existing functionality that chooses the parser based on the content type, which includes application/x-www-form-urlencoded. Ilija