Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:35224 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 22378 invoked by uid 1010); 6 Feb 2008 08:23:04 -0000 Delivered-To: ezmlm-scan-internals@lists.php.net Delivered-To: ezmlm-internals@lists.php.net Received: (qmail 22362 invoked from network); 6 Feb 2008 08:23:04 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Feb 2008 08:23:04 -0000 Authentication-Results: pb1.pair.com header.from=hannes.magnusson@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=hannes.magnusson@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 66.249.82.239 as permitted sender) DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: hannes.magnusson@gmail.com X-Host-Fingerprint: 66.249.82.239 wx-out-0506.google.com Received: from [66.249.82.239] ([66.249.82.239:22819] helo=wx-out-0506.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 59/C8-03555-86E69A74 for ; Wed, 06 Feb 2008 03:23:04 -0500 Received: by wx-out-0506.google.com with SMTP id s14so3231412wxc.26 for ; Wed, 06 Feb 2008 00:23:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=80gLBZEsZ7jzifgf8VDG4gveuP4UF/1dF5pKtHXw1kk=; b=d/mvS1AHRTCCwfqIHnTdnAbqHN5qTRWonDWNX6S2zmYPzjEnrIiWvxYrDzOTG99u+vCUvfnuwX6muR+v8m5HDd9WOxmap9JCZ1ELEhaKz0XBh+ZrRY0H0pjCgyShBWQ4Gqh1LncyA5PUXzmUBre1zxy8oE3EWxEyHABLu/NIRNE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=m7vJAqTgN8pvAZ9Lc1ace1OeqO8JorqxCD3wmqJajHq/Oezw0a/Mmn9kGcFqinZv5P4J8GQTkN89kV/9wH/i893rZaL35sERJL6Sx9ptl1onyAO1+DPv+D686AE93rwkt/lUtnkHxHord1dlby4LMqITk1YsBD4yKpCIYKxQWqw= Received: by 10.142.188.4 with SMTP id l4mr4956093wff.151.1202286180793; Wed, 06 Feb 2008 00:23:00 -0800 (PST) Received: by 10.142.192.6 with HTTP; Wed, 6 Feb 2008 00:23:00 -0800 (PST) Message-ID: <7f3ed2c30802060023l75f0a04ai3db8b405890c46c1@mail.gmail.com> Date: Wed, 6 Feb 2008 09:23:00 +0100 To: "Rasmus Lerdorf" Cc: "PHP internals" , "Pierre Joye" In-Reply-To: <47A909A1.9050201@lerdorf.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <47A909A1.9050201@lerdorf.com> Subject: Re: [PHP-DEV] get_magic_quotes_gpc, get-magic-quotes-runtime in head, get a "final" decision From: hannes.magnusson@gmail.com ("Hannes Magnusson") On Feb 6, 2008 2:13 AM, Rasmus Lerdorf wrote: > Daniel Brown wrote: > > On Feb 5, 2008 3:26 PM, Daniel Brown wrote: > >> On Feb 5, 2008 3:23 PM, Pierre Joye wrote: > >>> Hi, > >>> > >>> It seems that there is voices in favor of keeping the GPC related > >>> functions in HEAD/php6 but returning always FALSE. > >> Personally.... > >> > >> XX > > > > VOTE CHANGED > > > > -1 > > > > After a quick off-list discussion with Hannes (gotta' love Gmail > > chat), I realized that I forgot to consider backwards-compatibility. > > I think a lot of people miss the point of these particular functions. > This isn't about whether to keep magic quotes or not, it is whether to > keep the function that tells you whether magic quote mangling is > enabled. There is a lot of code out there that checks to see if this > feature is on, and deals with that case. Having this function that > simply tells the code to take the other path will allow it to work. > This is not about restoring the magic quotes feature at all. Exactly. The problem is that if the function is removed then we are breaking scripts for those few that actually check for MQ and deal with them. The scripts by uneducated users that do not check for MQ will continue to work as if nothing happened. However, by removing these functions we are breaking all the scripts by the educated users who are following best practices. Furthermore, none of the MQ functions are even marked as depreciated yet. What exactly is the gain in removing them completely? All I'm asking is to keep PHP_FUNCTION(get_magic_quotes_gpc) { RETURN_FALSE; } -Hannes