Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:52582
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.177 as permitted sender)
DomainKey-Status: bad
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        b=R/vrHPuxpf+QOK9Wcs7VJ0mxx9e1R5fKqrAMvf//cwfoRhSEL78lRp9ta3/S/WYO9E
         MLffQE6lBrJ9x38kUZYD6ztNobrdp9qiIIB/lJ+UTDA/5uHkEL05lQq6+HT48lSVR8RD
         /oXKLYiLBSZNK7ja3AO2LJ85CCJqQsP2BtoV4=
MIME-Version: 1.0
In-Reply-To: <4DE55CDA.302@sugarcrm.com>
References: <4DE5368A.6050603@moonspot.net>
	<2BFFEAC1-395E-4101-9452-002E63DCFD91@seancoates.com>
	<4DE55AB7.9050206@lerdorf.com>
	<4DE55CDA.302@sugarcrm.com>
Date: Tue, 31 May 2011 14:34:56 -0700
Message-ID: <BANLkTinoriGzfO7YzM+ov_Z0i50g=m8q6Q@mail.gmail.com>
To: Stas Malyshev <smalyshev@sugarcrm.com>
Cc: Rasmus <rasmus@lerdorf.com>, PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=bcaec5196185e3931a04a4992c3f
Subject: Re: [PHP-DEV] RFC: Short syntax for Arrays (redux)
From: birken@gmail.com (Dan Birken)

--bcaec5196185e3931a04a4992c3f
Content-Type: text/plain; charset=ISO-8859-1

It is worth noting that point you bring up is one that is present in PHP
currently:

php > print_r(json_decode(json_encode(array('a' => 'b'))));
stdClass Object
(
    [a] => b
)

php > print_r(json_decode(json_encode(array('a', 'b'))));
Array
(
    [0] => a
    [1] => b
)

-Dan

On Tue, May 31, 2011 at 2:25 PM, Stas Malyshev <smalyshev@sugarcrm.com>wrote:

> Hi!
>
>
>  Stas, I didn't understand your point about eval() and security. What did
>> you mean?
>>
>
> I meant if PHP has JSON syntax as native, e.g. you can say something like:
>
> $a = {"a":"b"};
>
> Then the temptation would be to write something like:
>
> // $json_string is {"a":"b"}
> $a = eval($json_string);
>
> just as Javascript programmers sometimes do. That would have the same
> security implications as it has in Javasctipt - somebody could inject
> executable code there, etc. Of course, nobody forces you to do this, but the
> temptation would be there.
>
> Also, with full JSON support it is not entirely clear to me what {"a": "b"}
> would mean - is it an array or an object? In JS, it's definitely an object,
> but in PHP objects are almost never used to store pure state without
> behavior, because we have hashtable arrays, while JS only has vector arrays.
> So here we have some unclear point (which does not happen with [] syntax,
> since with [] it's obvious we're talking about arrays, just as in many other
> languages).
>
> --
> Stanislav Malyshev, Software Architect
> SugarCRM: http://www.sugarcrm.com/
> (408)454-6900 ext. 227
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--bcaec5196185e3931a04a4992c3f--