Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:130255
Precedence: list
MIME-Version: 1.0
References: <CAO3baw=heFK7Cy03jLcsRaR4v6NM8mBgkUhcBBZE+e98m1A7iw@mail.gmail.com>
In-Reply-To: <CAO3baw=heFK7Cy03jLcsRaR4v6NM8mBgkUhcBBZE+e98m1A7iw@mail.gmail.com>
Date: Thu, 5 Mar 2026 05:20:40 +0100
Message-ID: <CADyq6sK0-Z7sAqjT4n-HCjAn_t0cHaD=obG12wJ57z2ggKu+0w@mail.gmail.com>
Subject: Re: [PHP-DEV] [RFC] [VOTE]ValueError Conversions for PHP 8.6
To: Muhammed Arshid KV <arshidkv12@gmail.com>
Cc: internals@lists.php.net
Content-Type: multipart/alternative; boundary="000000000000085b56064c3f43db"
From: ocramius@gmail.com (Marco Pivetta)

--000000000000085b56064c3f43db
Content-Type: text/plain; charset="UTF-8"

Hey Muhammed,

On Tue, 3 Mar 2026 at 09:38, Muhammed Arshid KV <arshidkv12@gmail.com>
wrote:

> Hi everyone,
>
> This is to announce the opening of the vote for the *ValueError
> Conversions RFC*.
>
> RFC:  https://wiki.php.net/rfc/php86_valueerror_conversions
> Discussion thread:  https://externals.io/message/130090
>
> The vote will be open for 2 weeks (and a few hours), closing on March 17th
> at midnight UTC.
>
> Cheers,
> Muhammed Arshid
>
I voted "yes" on most options except `error_log()`.

My rationale is that while hardening the filesystem-related functions you
noted in the RFC may highlight system issues, or even prevent security
issues, the `error_log()` function is everywhere in legacy code, and it
does not pose any risk if the parameters are misused (and silently ignored).

In fact, `error_log()` should not be used, but rather replaced by calls to
any PSR-3 compliant logger anyway.

Changing `error_log()` poses only burden on those that still have it in
their codebases.

Marco Pivetta

https://mastodon.social/@ocramius

https://ocramius.github.io/

--000000000000085b56064c3f43db
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Hey Muhammed,</div></div><br><div cl=
ass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_a=
ttr">On Tue, 3 Mar 2026 at 09:38, Muhammed Arshid KV &lt;<a href=3D"mailto:=
arshidkv12@gmail.com">arshidkv12@gmail.com</a>&gt; wrote:<br></div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px=
 solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"=
><div><div><div><div dir=3D"auto"><div><div><p>Hi everyone,</p>
<p>This is to announce the opening of the vote for the <b>ValueError Conver=
sions RFC</b>.</p>
<p>RFC:=C2=A0=C2=A0<a href=3D"https://wiki.php.net/rfc/php86_valueerror_con=
versions" target=3D"_blank">https://wiki.php.net/rfc/php86_valueerror_conve=
rsions</a><br>
Discussion thread:=C2=A0=C2=A0<a href=3D"https://externals.io/message/13009=
0" target=3D"_blank">https://externals.io/message/130090</a></p>
<p>The vote will be open for 2 weeks (and a few hours), closing on March 17=
th at midnight UTC.</p>
<p>Cheers,<br>
Muhammed Arshid</p></div></div></div></div></div></div></div></div></blockq=
uote><div>I voted &quot;yes&quot; on most options except `error_log()`.</di=
v><div><br></div><div>My rationale is that while hardening the filesystem-r=
elated functions you noted in the RFC may highlight system issues, or even =
prevent security issues, the `error_log()` function is everywhere in legacy=
 code, and it does not pose any risk if the parameters are misused (and sil=
ently ignored).</div><div><br></div><div>In fact, `error_log()` should not =
be used, but rather replaced by calls to any PSR-3 compliant logger anyway.=
</div><div><br></div><div>Changing `error_log()` poses only burden on those=
 that still have it in their codebases.</div><div><br></div><div><div></div=
><div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr">Marco Piv=
etta <br><br><a href=3D"https://mastodon.social/@ocramius" target=3D"_blank=
">https://mastodon.social/@ocramius</a><br><br><a href=3D"https://ocramius.=
github.io/" target=3D"_blank">https://ocramius.github.io/</a></div></div></=
div>=C2=A0</div></div></div>

--000000000000085b56064c3f43db--