Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:42176 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 88726 invoked from network); 8 Dec 2008 19:38:11 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Dec 2008 19:38:11 -0000 Authentication-Results: pb1.pair.com header.from=hannes.magnusson@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=hannes.magnusson@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 72.14.220.158 as permitted sender) DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: hannes.magnusson@gmail.com X-Host-Fingerprint: 72.14.220.158 fg-out-1718.google.com Received: from [72.14.220.158] ([72.14.220.158:62816] helo=fg-out-1718.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id B0/20-21816-2A77D394 for ; Mon, 08 Dec 2008 14:38:11 -0500 Received: by fg-out-1718.google.com with SMTP id 16so1024927fgg.23 for ; Mon, 08 Dec 2008 11:38:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender :to:subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references :x-google-sender-auth; bh=WSwCNaBNI9mLIaPzKqdXDTpMWVPhAUm9E8Pa1beTaVM=; b=a9SgcCC2tVkohLoZI5P5m0r0ymd8WexTmOEPA1dqRqaFP8vO6dXDg3MTBQwvw7RtV0 vNxPvJNCORapqLU7hdzh7nMT+6fn1NpL4WVDXDjK9edRoE/NHMXJVbxULihMfmN5HdMO pN1aKr2KzYkvLMQjZlcTkhmNsQOpMOXVXwrwU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references:x-google-sender-auth; b=ozcU5O0F/PaKebhb50oX17TIIfUZEGNTEQdbn+LCef0UhCT01nyLQ6Ibtx4gJTd9rg RG/Co/XDlOHjBA7ebJueiLRZAaBt/SSeh/pQ9MUXmbyKtF21dQSWTvmko5MryT74jcBW kEBPWUPY+H+KWyYrTd9koS3/U5SVF+9sJCJ70= Received: by 10.181.224.6 with SMTP id b6mr1334238bkr.187.1228765087976; Mon, 08 Dec 2008 11:38:07 -0800 (PST) Received: by 10.181.62.11 with HTTP; Mon, 8 Dec 2008 11:38:07 -0800 (PST) Message-ID: <7f3ed2c30812081138h60762129waf98ec40a5078723@mail.gmail.com> Date: Mon, 8 Dec 2008 20:38:07 +0100 Sender: hannes.magnusson@gmail.com To: "Derick Rethans" Cc: "Ilia Alshanetsky" , "=?ISO-8859-1?Q?Johannes_Schl=FCter?=" , "PHP Internals List" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <1228751251.3429.18.camel@goldfinger.johannes.nop> <057E0647-DE8E-4ACD-B5D5-2D2289B168CD@prohost.org> X-Google-Sender-Auth: f27051c857485d1c Subject: Re: [PHP-DEV] About dropping magic_quotes in 5.3 (was: Re: [PHP-DEV] Re: PHP 5.2.7 + magic_quotes_gpc broken) From: bjori@php.net ("Hannes Magnusson") On Mon, Dec 8, 2008 at 20:15, Derick Rethans wrote: > On Mon, 8 Dec 2008, Ilia Alshanetsky wrote: > >> In my opinion a big change like droping something that was and still used by >> many people are a "security measure", albeit a poor one is something that can >> only be done in a major release. > > I concur. Like I said, we simply cannot nuke it. But we can however turn it off by default. -Hannes