Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:42145
Return-Path: <ilia@prohost.org>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 81321 invoked from network); 8 Dec 2008 14:15:20 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 8 Dec 2008 14:15:20 -0000
Authentication-Results: pb1.pair.com header.from=ilia@prohost.org; sender-id=unknown
Authentication-Results: pb1.pair.com smtp.mail=ilia@prohost.org; spf=permerror; sender-id=unknown
Received-SPF: error (pb1.pair.com: domain prohost.org from 209.85.132.244 cause and error)
X-PHP-List-Original-Sender: ilia@prohost.org
X-Host-Fingerprint: 209.85.132.244 an-out-0708.google.com  
Received: from [209.85.132.244] ([209.85.132.244:60767] helo=an-out-0708.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 73/54-57775-7FB2D394 for <internals@lists.php.net>; Mon, 08 Dec 2008 09:15:20 -0500
Received: by an-out-0708.google.com with SMTP id b2so423982ana.38
        for <internals@lists.php.net>; Mon, 08 Dec 2008 06:15:17 -0800 (PST)
Received: by 10.64.210.3 with SMTP id i3mr2838310qbg.30.1228745716823;
        Mon, 08 Dec 2008 06:15:16 -0800 (PST)
Received: from ?192.168.1.100? (TOROON63-1176059019.sdsl.bell.ca [70.25.60.139])
        by mx.google.com with ESMTPS id k29sm10514191qba.27.2008.12.08.06.15.14
        (version=TLSv1/SSLv3 cipher=RC4-MD5);
        Mon, 08 Dec 2008 06:15:15 -0800 (PST)
To: Marcus Boerger <helly@php.net>
In-Reply-To: <1349302921.20081207193342@marcus-boerger.de>
X-Priority: 3 (Normal)
References: <40E11268-D705-4F32-96E0-4C0AEA27AAC9@macvicar.net> <BE107CA1-A1B3-4429-9E5F-056F94A05A94@prohost.org> <1349302921.20081207193342@marcus-boerger.de>
Message-ID: <DE53E110-C7BB-4B13-A642-07DA0177E205@prohost.org>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v929.2)
Date: Mon, 8 Dec 2008 09:15:11 -0500
Cc: Scott MacVicar <scott@macvicar.net>,
 PHP Internals <internals@lists.php.net>,
 Lukas Smith <mls@pooteeweet.org>
X-Mailer: Apple Mail (2.929.2)
Subject: Re: [PHP-DEV] Re: PHP 5.2.7 + magic_quotes_gpc broken
From: ilia@prohost.org (Ilia Alshanetsky)

Should the 5.3 release be re-branched perhaps as well, since it too  
has this problem?


On 7-Dec-08, at 1:33 PM, Marcus Boerger wrote:

> Hello Ilia,
>
>  brilliant :-)
>
> Sunday, December 7, 2008, 7:16:43 PM, you wrote:
>
>> I will be re-branching 5.2.7 with this revert for the purpose of  
>> 5.2.8
>> this week. This will allow the normal 5.2 bug fixing to continue as
>> normal.
>
>
>> On 6-Dec-08, at 3:35 PM, Scott MacVicar wrote:
>
>>> Hey,
>>>
>>> There have been several bug reports about magic_quotes_gpc being
>>> broken, at the moment in 5.2.7 the escaping is not performed even
>>> when enabled. So any applications that attempt to undo the work of
>>> magic_quotes_gpc will end up with problems.
>>>
>>> I've backed out the bug that broke this #42718
>>>
>>> Since this is a relative serious issue from a security stand point
>>> if people rely on it being enabled and a potential data loss for
>>> those trying to undo it, I'd like to see a release packaged asap.
>>>
>>> If Ilia agrees then could fixes to the 5.2 branch be restricted to
>>> build fixes only.
>>>
>>> Scott
>
>> Ilia Alshanetsky
>
>
>
>
>
>
>
>
> Best regards,
> Marcus
>

Ilia Alshanetsky