Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:47497 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 4157 invoked from network); 23 Mar 2010 18:16:24 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 23 Mar 2010 18:16:24 -0000 Authentication-Results: pb1.pair.com header.from=johannes@php.net; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=johannes@php.net; spf=unknown; sender-id=unknown Received-SPF: unknown (pb1.pair.com: domain php.net does not designate 83.243.58.134 as permitted sender) X-PHP-List-Original-Sender: johannes@php.net X-Host-Fingerprint: 83.243.58.134 mailout2.netbeat.de Linux 2.6 Received: from [83.243.58.134] ([83.243.58.134:36620] helo=mailout2.netbeat.de) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 26/A6-03444-57509AB4 for ; Tue, 23 Mar 2010 13:16:24 -0500 Received: (qmail 3371 invoked by uid 89); 23 Mar 2010 18:11:42 -0000 Received: from unknown (HELO ?192.168.1.28?) (postmaster%schlueters.de@93.104.57.43) by mailout2.netbeat.de with ESMTPA; 23 Mar 2010 18:11:42 -0000 X-Originator: 9e51b244e0a38413ab6a9876e36ba9df To: Kalle Sommer Nielsen Cc: Derick Rethans , PHP Developers Mailing List In-Reply-To: <2dedb8a1003231044s742a9389nf29c1207f4e86aac@mail.gmail.com> References: <2dedb8a1003231044s742a9389nf29c1207f4e86aac@mail.gmail.com> Content-Type: text/plain; charset="UTF-8" Organization: php.net Date: Tue, 23 Mar 2010 19:08:39 +0100 Message-ID: <1269367719.15491.4.camel@guybrush> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] trunk is alive and open From: johannes@php.net (Johannes =?ISO-8859-1?Q?Schl=FCter?=) Hi, On Tue, 2010-03-23 at 18:44 +0100, Kalle Sommer Nielsen wrote: > Im assuming that we are still removing the stuff that we deprecated in > 5.3 and removed in the old trunk? If thats the case then I will work > on merging those removed features like safe_mode and so on out. I think that's, like other stuff, a case-by-case decision. For example I don't think it's a good idea to drop magic_quotes in a version which doesn't include a big BC break. Unfortunately many applications are half-secure by this setting but absolutely insecure once that's changed and people update without reading docs - especially if a quick test shows no errors. With finally dropping register_globals I won't have problems. johannes