Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:42136
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain prohost.org from 74.125.46.29 cause and error)
Cc: PHP Internals <internals@lists.php.net>
Message-ID: <BE107CA1-A1B3-4429-9E5F-056F94A05A94@prohost.org>
To: Scott MacVicar <scott@macvicar.net>
In-Reply-To: <40E11268-D705-4F32-96E0-4C0AEA27AAC9@macvicar.net>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v929.2)
Date: Sun, 7 Dec 2008 13:16:43 -0500
References: <40E11268-D705-4F32-96E0-4C0AEA27AAC9@macvicar.net>
Subject: Re: PHP 5.2.7 + magic_quotes_gpc broken
From: ilia@prohost.org (Ilia Alshanetsky)

I will be re-branching 5.2.7 with this revert for the purpose of 5.2.8  
this week. This will allow the normal 5.2 bug fixing to continue as  
normal.


On 6-Dec-08, at 3:35 PM, Scott MacVicar wrote:

> Hey,
>
> There have been several bug reports about magic_quotes_gpc being  
> broken, at the moment in 5.2.7 the escaping is not performed even  
> when enabled. So any applications that attempt to undo the work of  
> magic_quotes_gpc will end up with problems.
>
> I've backed out the bug that broke this #42718
>
> Since this is a relative serious issue from a security stand point  
> if people rely on it being enabled and a potential data loss for  
> those trying to undo it, I'd like to see a release packaged asap.
>
> If Ilia agrees then could fixes to the 5.2 branch be restricted to  
> build fixes only.
>
> Scott

Ilia Alshanetsky