Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:54014
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain roshambo.org from 209.85.214.170 cause and error)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <4E2384C9.1060300@sugarcrm.com>
Date: Sun, 17 Jul 2011 18:32:45 -0700
Cc: "RQuadling@GMail.com" <RQuadling@GMail.com>,
 Daniel Convissor <danielc@analysisandsolutions.com>,
 PHP Internals List <internals@lists.php.net>
Content-Transfer-Encoding: quoted-printable
Message-ID: <F01A5209-5FAC-4088-8EB9-E15D0F599845@roshambo.org>
References: <4E17F5A0.3070409@sugarcrm.com> <BC37F785-39A7-4A38-ADBD-482C7D87438B@roshambo.org> <4E1B9343.3090000@sugarcrm.com> <967B58EB-C704-40CD-AFEE-D0CA2192F4FA@roshambo.org> <4E1DC072.8080300@sugarcrm.com> <CAH-PCH7=08Pqq=5-Z5BA1wpc8sXcS20ohmsq8FGnDm-yQGqbyQ@mail.gmail.com> <4E1DE20E.20902@sugarcrm.com> <CAH-PCH50J+U4Jgupbc70v4ZdXq9nVk74n6AXpmmEQXt=gOP26A@mail.gmail.com> <4E1DEE7C.8030203@sugarcrm.com> <20110717010457.GA22595@panix.com> <CAKUjMCWwQrdM=KTx+BznxGX172=vasbhgPocHkjzk=0M0Bhj+Q@mail.gmail.com> <4E237EC9.3070503@sugarcrm.com> <46348DB2-2E2D-4058-B796-ADB6E42EDC8B@roshambo.org> <4E2384C9.1060300@sugarcrm.com>
To: Stas Malyshev <smalyshev@sugarcrm.com>
Subject: Re: [PHP-DEV] [VOTE] 5.4 features vote
From: philip@roshambo.org (Philip Olson)


On Jul 17, 2011, at 5:56 PM, Stas Malyshev wrote:

> Hi!
>=20
> On 7/17/11 5:46 PM, Philip Olson wrote:
>>> And you rely on magic_quotes being on, right? Then you have peculiar =
definition of "working perfectly".
>>=20
>> Nobody here said they rely on magic quotes, and that is not related =
to what a default value means,
>> or how they are handled.
>=20
> We're discussing magic quotes. The quote was "My local ini file is 6 =
lines long. Works perfectly.". So either one of these 6 lines resets =
magic_quotes to 0 - which proves my point - or Richard considers =
application relying on default of magic quotes - which is on - "working =
perfectly", which is just wrong.

What is the proven point? That people shouldn't use magic quotes? Nobody =
here is arguing=20
with that. But dismissing the fact that magic quotes is still enabled by =
default, because=20
we distribute php.ini files that disable it, doesn't help. Now, saying =
it's worth killing
despite it being enabled by default because it's bad and has been =
throwing E_DEPRECATED
errors since PHP 5.3.0, and that our distributed php.ini files disable =
it, now that's an=20
entirely different story. Such an argument would also look up our old =
php.ini-recommended
settings and see it was disabled there as well. But fact is, nobody has =
done that, nor has=20
there been a proper discussion or RFC on this topic for 5.4. The vote =
was premature. Would=20
it have turned out differently had we done it properly? Probably, but at =
least we'd have a=20
proper reference point for why we removed a security feature that was =
still enabled by=20
default.

And to be clear, I am not arguing for or against its removal, but =
rather, am arguing against=20
how it was handled. Throwing 10 separate topics (some with and without =
RFCs) into one thread=20
is a recipe for non-discussion. That's what happened here, with magic =
quotes removal being a
part of it.

</rant>

Regards,
Philip