Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:128031
Date: Mon, 14 Jul 2025 12:13:42 +0100 (BST)
To: =?UTF-8?Q?Tim_D=C3=BCsterhus?= <tim@bastelstu.be>
cc: "Gina P. Banyard" <internals@gpb.moe>, 
    PHP internals <internals@lists.php.net>
Subject: Re: [PHP-DEV] [RFC] Deprecations for PHP 8.5
In-Reply-To: <d481df08-4d24-410e-8939-fa1c7526cf14@bastelstu.be>
Message-ID: <ceb0c566-81a0-fb6b-71b5-96d87e92e429@php.net>
References: <hzKdzBWWITU1ePjv3qcyK-OzroFAkWst9MQBw2zvKSA8pk1iqruLZZWTTh9gYDo2QX8EY_PiirVYDuwne2Upr3GlqZk570wtLOF49aaP-HQ=@gpb.moe> <eb5b84a5-c665-279a-f9e4-8e162b5cb0b8@php.net> <d481df08-4d24-410e-8939-fa1c7526cf14@bastelstu.be>
Precedence: bulk
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="8323329-952145540-1752491622=:52945"
From: derick@php.net (Derick Rethans)

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--8323329-952145540-1752491622=:52945
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Fri, 4 Jul 2025, Tim D=C3=BCsterhus wrote:

> On 7/3/25 18:04, Derick Rethans wrote:
>
> > The intention behind the filter extension was that admins can set a=20
> > default filter for *all* data coming in through this=20
> > `filter.default` setting as a "safe" fallback. That could/should=20
> > probably even be a
>=20
> Genuine question: Is that *intention* documented anywhere?=20
> https://www.php.net/manual/en/function.filter-input.php only makes=20
> factual statements about the behavior, but not how one is supposed to=20
> use them. Similarly=20
> https://www.php.net/manual/en/filter.configuration.php also says that=20
> a default filter can be configured, but not why one would want to do=20
> so.

I've done a bit of archeology, and came up with the following:

The SAPI API was designed in 2003:

https://github.com/php/php-src/commit/7429c2dc3f72ed9a6a41ccefc68595e76319c=
dae

The extension started in PECL in 2005, and then was moved into the core=20
distribution: https://pecl.php.net/package/filter =E2=80=94 unfortunately i=
t=20
seems that the history of the SVN repository was lost.

There is some context in the mailing list archive:
- https://externals.io/message/25728#25738
- https://externals.io/message/43721
- https://news-web.php.net/php.internals/23064
- https://news-web.php.net/php.internals/23627

There is a comment from Rasmus on why filter keeps the raw information
in 2006: https://news-web.php.net/php.pecl.dev/4000
in 2014: https://news-web.php.net/php.internals/74371

cheers,
Derick

--=20
https://derickrethans.nl | https://xdebug.org | https://dram.io

Author of Xdebug. Like it? Consider supporting me: https://xdebug.org/suppo=
rt

mastodon: @derickr@phpc.social @xdebug@phpc.social
--8323329-952145540-1752491622=:52945--