Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:54029 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 44868 invoked from network); 18 Jul 2011 09:44:43 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 18 Jul 2011 09:44:43 -0000 Authentication-Results: pb1.pair.com header.from=rquadling@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=rquadling@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.42 as permitted sender) X-PHP-List-Original-Sender: rquadling@gmail.com X-Host-Fingerprint: 209.85.216.42 mail-qw0-f42.google.com Received: from [209.85.216.42] ([209.85.216.42:52359] helo=mail-qw0-f42.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 53/95-08769-980042E4 for ; Mon, 18 Jul 2011 05:44:42 -0400 Received: by qwi4 with SMTP id 4so1606995qwi.29 for ; Mon, 18 Jul 2011 02:44:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:reply-to:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=Pr394wNjOcQdENF4w5eM/f5hbc3hqL9PbIoQckNtvuk=; b=RlaG7mzUN01nwoM3SGbRuEoFBc0oyC+vsTqVfPnYAXwJe+5K1Hp2HAUy5NsmHZHu3w p6w9Sn498XUc4WHXAoMp2PN2lYJ1rpeRN5/cvvhPy4RiOeJ98QXcneHkqyUyGVojGYl+ vELuzg4xeWlqjr9kRncY8UBGJCITD1g5f53uk= Received: by 10.224.178.83 with SMTP id bl19mr2533148qab.57.1310982279197; Mon, 18 Jul 2011 02:44:39 -0700 (PDT) MIME-Version: 1.0 Received: by 10.229.87.70 with HTTP; Mon, 18 Jul 2011 02:44:19 -0700 (PDT) Reply-To: RQuadling@GMail.com In-Reply-To: <4E237EC9.3070503@sugarcrm.com> References: <4E17F5A0.3070409@sugarcrm.com> <4E1B9343.3090000@sugarcrm.com> <967B58EB-C704-40CD-AFEE-D0CA2192F4FA@roshambo.org> <4E1DC072.8080300@sugarcrm.com> <4E1DE20E.20902@sugarcrm.com> <4E1DEE7C.8030203@sugarcrm.com> <20110717010457.GA22595@panix.com> <4E237EC9.3070503@sugarcrm.com> Date: Mon, 18 Jul 2011 10:44:19 +0100 Message-ID: To: Stas Malyshev Cc: Daniel Convissor , PHP Internals List Content-Type: text/plain; charset=UTF-8 Subject: Re: [PHP-DEV] [VOTE] 5.4 features vote From: rquadling@gmail.com (Richard Quadling) On 18 July 2011 01:31, Stas Malyshev wrote: > Hi! > > On 7/17/11 3:03 PM, Richard Quadling wrote: >> >> Why bother having defaults if you don't use them. > > Err, well, the way PHP ini system works you always have defaults - something > is always stored in the hash. > >> My local ini file is 6 lines long. Works perfectly. > > And you rely on magic_quotes being on, right? Then you have peculiar > definition of "working perfectly". Currently working really only encompasses running PhD on Windows (new setup for the new home laptop). But, in essence, the inability to rely on one default setting inescapably leads to the inability to rely on any of the defaults. So, the default values are flawed. And therefore relying on them is flawed. So bugger me. So, I _HAVE_ to maintain an INI file that, for the most time, will have the same values as the built-in defaults, but then having to constantly maintain it for every release of PHP, rather than just accepting the defaults. So why bother having defaults at all? Just store NULLS for everything and force all settings to be made via the ini file. Hmmm. Overkill?. So set the default values to appropriate safe/secure values. Hmm. Dev or Production? It would seem that my relying on the default values is my fundamental mistake because the defaults cannot be meaningful for all environments or are counter to the currently perceived best value (magic_quotes is still enabled by default? JHC - why? PHP5.3.0 is nearly 3 years old and yet the default value is still to have them enabled? So the documentation is clearly incorrect. "This feature has been DEPRECATED as of PHP 5.3.0.". Nope. The feature is alive and well and if you don't read alter your ini file to go against the current default value you are leaving yourself wide open). A big fuss was made on PHP Classes over the recent announcement of the plan to deprecate ext/myql. One of the issues raised was about shared hosting. Do shared hosters set the INI files a certain way? Do they just rename php.ini-production? Do they just leave things as the default/built-in? Do they care? -- Richard Quadling Twitter : EE : Zend : PHPDoc @RQuadling : e-e.com/M_248814.html : bit.ly/9O8vFY : bit.ly/lFnVea