Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:127088
Message-ID:
 <AM8P250MB01700E5B84594B83ED5FB56FE2B72@AM8P250MB0170.EURP250.PROD.OUTLOOK.COM>
Date: Thu, 10 Apr 2025 20:53:24 +0200
User-Agent: Mozilla Thunderbird
Subject: Re: [PHP-DEV] [RFC] [Discussion] Change default for
 zend.exception_ignore_args INI setting
To: =?UTF-8?Q?Tim_D=C3=BCsterhus?= <tim@bastelstu.be>,
 Andrew Lyons <andrew@nicols.co.uk>
Cc: internals@lists.php.net
References: <CAObMQFcUB48LEusdtYNS2hnr_qyKJppC11qfbGxkOkuKQtqmEg@mail.gmail.com>
 <2e02e8bd16ccd8f326a014fa3812da43@bastelstu.be>
Content-Language: en-US
In-Reply-To: <2e02e8bd16ccd8f326a014fa3812da43@bastelstu.be>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: bulk
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM8P250MB0170:EE_|PA2P250MB1084:EE_
X-MS-Office365-Filtering-Correlation-Id: ad1dfb19-812a-4a07-7999-08dd7860f9ae
X-Microsoft-Antispam:
	BCL:0;ARA:14566002|461199028|6090799003|19110799003|5072599009|8060799006|15080799006|7092599003|10035399004|3412199025|4302099013|440099028|26104999006|1602099012;
X-Microsoft-Antispam-Message-Info:
	=?utf-8?B?SFNXTEgwYi8xNFNCYnE5YnRGZWh5SGdmTGw1L25Tb211eTk0REZSVDBLNGRI?=
 =?utf-8?B?WEdXWFNOZGNSTkxSNEdtWDl1THFMTDBFdUFjWTVUUTVDZldCaEtqT0gvNE9G?=
 =?utf-8?B?alZSNEpneVhEYUl6VnlMaFBRTUgwZGpzTDFudzRNN2Rqc0ZZS3BnR3NHcE8w?=
 =?utf-8?B?SkF0L3BlZmZGNUFZYkl0MERWZGx3NkY5UmNqWDBUWHJobk95dlZwdFJMN0hr?=
 =?utf-8?B?andRU0RNK2FiZ2xJKzFXOGRTWXJlT1ZvT0J4ZEJwaEhYa0VycnQvYVF5UnpK?=
 =?utf-8?B?bm9LZmNGbU01VmFhMjJSWVBRRXhETVRuTzdmR1JRV1NmUHBjTktSZkhyL2pw?=
 =?utf-8?B?cStKSUVzRmxSdXZUbzJRR256VFU5Y0hnNFBGOUdLV0pmMFpQZEVrbFpZV0VV?=
 =?utf-8?B?NkEvNjJuWWpCNVh6dkVZeDR1UUljSjhhL2FCWmpLZ3BBL1F2d0VUSGNSN0hz?=
 =?utf-8?B?RlVjZDZISmJSSVJJR0YrL01rc1pWRmdWOUtVR0JpYnFhRy9rNzQ5UGhYUU41?=
 =?utf-8?B?SDBTQkIvRnRSVEN6ZGJXNTBOaWFnM1FoeU1MOXRZM0V6UTFLWitMTUJydGNy?=
 =?utf-8?B?VXZ4KzZycFRNL1ZrNUVCaHpiS3YvYjk1VGJaWDA0WFdING1iampzSGJNNWh2?=
 =?utf-8?B?NjAxUmZTV0YxWG54YXZZN1czTitlMVF5QUk4RmpuUG80WWxiMGpLY1pPT2d1?=
 =?utf-8?B?c3MyVCs3OXh0bUxSbXJadjJadHd4Q0Nxc0Jmb2ZKellpQWdxTDNicG5HT2xH?=
 =?utf-8?B?cGFrZlRNRjJ0MVp2ZE4zbXB5OHl6aWVjRzFhd1lnbkVwR3NhNGEwM3FLT3hu?=
 =?utf-8?B?S3lYb0w1TXYyVExKN3dsZFdyalhiUGlxRDVSeGFTWk4zbWhzY3FydWpwRGM3?=
 =?utf-8?B?ckgyQjFoZ1FuK2pyQ2ZKRnViTHFxV1JtQTRkM0Y2ZE45MHY5Qis1MVRVOHVM?=
 =?utf-8?B?a0NNRWpvMGlZUjl4UGd3WEF0SkVnOEpGL2ZvUjlpNDZTSE5wdC9za2hwQmpB?=
 =?utf-8?B?WU11NUZIU0hvUXVHYVJKVjhlUVR2SUcyTzMwTlB1TTlLUkJySU5vbjU2ckRY?=
 =?utf-8?B?bEVHYjNySUZtV3dyM2R0c250b1lpeE1aL2ZRVjJIZmI4QnlDWFlzL2ljUmpD?=
 =?utf-8?B?eGpaQ1M4S0dubWUyU1hJWTJWKzhLVG5UdkQxMTBVYjJNVFlCWHFMdUF3dnFw?=
 =?utf-8?B?dUR6eFZXTi8zako0R0tIVFdtMkRsQldxbjJGaG56cW12VHoyMmVQUHVRYzNy?=
 =?utf-8?B?THFpbDlwUjA3aWFOTEkzZktmYXRYV3ZsenlYRjhra3puY01Pb043aHQ0NkhT?=
 =?utf-8?B?M2RiRjhlQlR5TlFmMzJvNWpTWFlvbWd6Z3NUNXprZFFUNUNJazY5WHR3Qjdh?=
 =?utf-8?B?QXI0UlNKSW9PdTA4QnVzRm9SbWx2VXVhZHNQV3VBOEt0d0t2SkV4TkhkcmV0?=
 =?utf-8?B?ZjNUQllPL2tRMDlHT3dXSlI3MWcvWkxPNzhXOWEvczBUeG5CZXR0U3dndE1o?=
 =?utf-8?B?QVlzcGtJTjB5OGt5NUpyak1HR2ZmbitXcFV5TXR6dENULzdrQUZjekM4aUlk?=
 =?utf-8?B?aTRKbzlTMFJRK1JxK2NaenBSL0hjNWphbFNzdy9pWXFzVVhsSERtaGJEQVpX?=
 =?utf-8?B?QmNPNmJWVmdDaVpHVXN1SW0zUTFPaE1BSmd1aHZUSm03cEVyeGF1Y1Y5ZlFX?=
 =?utf-8?B?U3A4d1p2SmpyZlErbUJKdnprU2xyRTVuQlcyVU1oRWhDblZGSWkwKzdLNUl5?=
 =?utf-8?Q?aT4NU++8HhOm6TXgcQ=3D?=
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
	=?utf-8?B?emdOcXZvQlBiakk4RjJFZVZvTDV6dnE1cnBCaVRSUE9iYjdtM004dC8zdkZm?=
 =?utf-8?B?TW15Y2xHRjlVZTJkWE55Zmpid1Q4YjJ6UnF1RmYrUHVaL3FhRG9TdUkwbi9j?=
 =?utf-8?B?M1gyM0ZRTEl6WnZTaEdlRjVhSTRhUmNSRFRlcXJsU2hJNVk1bTMyVmZPTFpv?=
 =?utf-8?B?WFNleTB1ZDBZYnJBUjNjU2tMQVMwQVBZdE1zYUg4M01tL3dyQk9uUTFMQ2xv?=
 =?utf-8?B?MStIdW82MEpZcC95SnFsNE1sN1FqN1hzL3laaVJDd3JvYUNhcDF2OHh1Y0ZL?=
 =?utf-8?B?ZzBGejN4WEpmTTlOaS9aMTF0Z1RsNC9Tc1A3cGVsT1k5aEh5dUFVMjNJRy9S?=
 =?utf-8?B?ck9PSVdFTmplOXVXVnh0VXRNN2Z2YkNuZkExMGpQdWY5ZUdqZHJSZ2JCQ28r?=
 =?utf-8?B?N2JHdXZScjU5cENJL3BtQ1FRdzRvTXk2eE8xcW8xckVUK0h2VS83R1Iwc0dq?=
 =?utf-8?B?YTNNbG04djFvaGprVzltZ3htd1l6aXBzL2JhWjlJaHNVamFlYmE0MkN3SEhD?=
 =?utf-8?B?NHBjck1Zc2R6eEpnOXlKOCtKcWhmRzZteUp1MUI5cFRYRkprcUVKMzNYSTlq?=
 =?utf-8?B?TlhqYTdOcGVibm1DVm83THdDcjZOU010d1BjZUhITkFSTVlXcTQ5NGhRYlY5?=
 =?utf-8?B?MTVPVUtMcXk4NVRuUUdYcDZreWZ2YzVqOW9DRVNkbXpIV3hXcUdSSWl1Tkxk?=
 =?utf-8?B?Wlg1R203cU9WSUQveFpaTGI2ZXMrWWIxWFFZdURBNGozNU02ck1BOWt5Ym5n?=
 =?utf-8?B?a2hkV0dTaW5uTW00WGNQY3l0Wk5yajdEbHJISGR2MlVsSGp6V3JtY2pudW5O?=
 =?utf-8?B?MkhRdmU3dUR1OVQ2My9iNElmaTdJU1JSbnRtTGtNdXI2SVdpQ2FwZGZrK1dW?=
 =?utf-8?B?bTBTRDdpckx2U29qV2ZUNlh6NEQyOERoZWJRZHFaNHk3YjlqUldRQWM5YU5T?=
 =?utf-8?B?TWhETmJpWDJwWTY2dVpIZXJwK0doTWtUWnVBYURoZUQ5eWF5eFl4SURIaVUw?=
 =?utf-8?B?NFpaclBNVjFXUEo3aS9PV0NxZm1WeTFtUXNOd2VjOUF0R0lldXJxajhUUnJK?=
 =?utf-8?B?djBlTnAyTFpPcUhSNzZiMk5Db3RxTXRiNEwrYWhnbUZ3aFBKMnprSkViWk9R?=
 =?utf-8?B?b0RDVnRJTUtYVVpLNDE5N1FyOCt5dmhaTFVIS3JabWJqbTUzejBWeVhUNHcv?=
 =?utf-8?B?eVA5bzd4VEh3c2RReExoMXlrN05tUy9UVElHSzB2TTdBRXJWcDZSR0Y0czNm?=
 =?utf-8?B?ZkJIclJXTjNkZXNMSnVneXZURUJkcXp6N2oxR0l4eS9DMC9NNFI1MDN6ZWxE?=
 =?utf-8?B?a0t5OWJ1NWRwZHZJbm9YdUF6TThkTktUZW9CTzZZVWRlVTBTT0krS2JUSzha?=
 =?utf-8?B?RlBHd0VFc3dMUGdjL2dQZXFpVnRMSmY3ZzRKN2NFWDhWcjhEWHQ2V2Y3dzZV?=
 =?utf-8?B?cU9wYjVpK0E2bzhzZ0FWLzQ4NWtXWlhPS2lKRlhBYzczN0pWWVFIcXAxSld0?=
 =?utf-8?B?Rlp4R2pZNFkzNW1nMk8yczdNTXI1VDI3TkhHMkMxK3Iya2RWbzJLK1NFTG5q?=
 =?utf-8?B?YzZtSFlVQzJPRU4yaTcyL1hEaUZ2VEh5VkVMdTZNL2Y2RjhaenBDWVc0QzRW?=
 =?utf-8?B?VjBnd3FKS2h0OGc1UllCOWZCR3FETUdPTEtqN0xwSWNTN2w4ci82Z00xK1dE?=
 =?utf-8?B?SE5QMzFlcmZHVitLbUROVUlzNjIxQlVOR1NkTm5uOU11UEJBcDRLdUd2Ynlv?=
 =?utf-8?Q?J5W/hL1sg6VbQ6IDws=3D?=
X-OriginatorOrg: sct-15-20-7784-11-msonline-outlook-95b76.templateTenant
X-MS-Exchange-CrossTenant-Network-Message-Id: ad1dfb19-812a-4a07-7999-08dd7860f9ae
X-MS-Exchange-CrossTenant-AuthSource: AM8P250MB0170.EURP250.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Apr 2025 18:53:26.6270
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
	00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA2P250MB1084
From: bobwei9@hotmail.com (Bob Weinand)

Hey,

On 10.4.2025 17:19:57, Tim Düsterhus wrote:
> Hi
>
> Am 2025-04-09 04:00, schrieb Andrew Lyons:
>> The intent of this change is to make PHP installations safer by 
>> default and
>> prevent the accidental release of sensitive information in stack traces.
>>
>> * RFC: https://wiki.php.net/rfc/exception_ignore_args_default_value
>> * Implementation: https://github.com/php/php-src/pull/18215
>
> As I had said on GitHub before, but to put it onto the list for 
> visibility:
>
> I'd rather see the value in `php.ini-production` being changed to 
> `Off` to match the built-in default. see 
> https://github.com/php/php-src/pull/18215#issuecomment-2768618516


Full agreement with Tim here - make PHP friendly to development.

There are only few places where secrets would be actually relevant, and 
those can be covered by #[SensitiveParameter].


I've been quite annoyed a few times - I install PHP, promptly all args 
missing in my logs. Not a great experience for me to then first have to 
toggle it.


Also, it's something which you need to be even aware of - newcomers to 
PHP would see the stacktraces not containing arguments and not even know 
that they could enable them.


@Tim: You have my full support to propose a counterproposal here.


Bob