Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:128418
Content-Type: text/plain; charset=utf-8
Message-ID: <1754569681678.1068645396.2815320696@yahoo.de>
To: tim@bastelstu.be, Derick Rethans <derick@php.net>, "Gina P. Banyard"
 <internals@gpb.moe>
Cc: PHP internals <internals@lists.php.net>
Subject: Re: [PHP-DEV] [RFC] Deprecations for PHP 8.5
Date: Thu, 07 Aug 2025 12:44:57 +0000
In-Reply-To: <d481df08-4d24-410e-8939-fa1c7526cf14@bastelstu.be>
References: <d481df08-4d24-410e-8939-fa1c7526cf14@bastelstu.be>
User-Agent: Vivaldi Mail/7.5.3735.58
Content-Transfer-Encoding: quoted-printable
Precedence: list
MIME-Version: 1.0
From: hanskrentel@yahoo.de (Hans Krentel)




On Friday 04 July 2025 14:40:23 (+02:00), Tim D=C3=BCsterhus wrote:

> Hi
>=20
> On 7/3/25 18:04, Derick Rethans wrote:
> > The intention behind the filter extension was that admins can set a
> > default filter for *all* data coming in through this `filter.default`
> > setting as a "safe" fallback. That could/should probably even be a
>=20
> Genuine question: Is that *intention* documented anywhere? https://www.=
php.net/manual/en/function.filter-input.php only makes factual statements =
about the behavior, but not how one is supposed to use them. Similarly =
https://www.php.net/manual/en/filter.configuration.php also says that a =
default filter can be configured, but not why one would want to do so.

If we look into php-src docs, nowadays under the docs-old entry IIRC, we =
may find how to write a filter.

That it is on the level of extending PHP, and I'd interpret that it =
strongly points towards system administration or at least that it is about =
making systematic use of the PHP filter extension.

Have not yet made research based on age or reviewed specifically after your=
 message, e.g. correlations towards the date since ext.filter is part of =
the solution, but my nose tells me the documentation is likely related to =
what you'd like learn more about.

This may be totally misleading, but when I combine that with Derricks =
expertise in php-src and his earlier comment, I'm somehow under the =
impression this has the potential to answer even genuine questions that =
require to reason about documented intend.

So please let me know if it is still of help @Tim

-- hakre