Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:54171 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 71563 invoked from network); 23 Jul 2011 22:29:41 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 23 Jul 2011 22:29:41 -0000 Authentication-Results: pb1.pair.com header.from=tyra3l@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=tyra3l@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.42 as permitted sender) X-PHP-List-Original-Sender: tyra3l@gmail.com X-Host-Fingerprint: 209.85.213.42 mail-yw0-f42.google.com Received: from [209.85.213.42] ([209.85.213.42:40621] helo=mail-yw0-f42.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id A7/12-59700-45B4B2E4 for ; Sat, 23 Jul 2011 18:29:40 -0400 Received: by ywb6 with SMTP id 6so1987555ywb.29 for ; Sat, 23 Jul 2011 15:29:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=O+9iS8JNSE8b19KEg7A78R6CxcsQh6O27nPD+p/WTiQ=; b=Tu1tEL7TCgPYWMjBjc7bT7Ztau9OtwpN3qeCEA1oyhEZHXMlL+fCn3c/qleRYo6PG7 /Bhfba2CthIbSuRYxYSGcAHUrqzz7XMBNfSPHaKKnSOEPeb6GU0YFYSUtgt4tlb/FkAO RloWomecqIH0frPEZiZ7ISUW9uDo7gf14///0= MIME-Version: 1.0 Received: by 10.236.154.101 with SMTP id g65mr4075561yhk.135.1311460177486; Sat, 23 Jul 2011 15:29:37 -0700 (PDT) Received: by 10.147.167.6 with HTTP; Sat, 23 Jul 2011 15:29:37 -0700 (PDT) Date: Sun, 24 Jul 2011 00:29:37 +0200 Message-ID: To: PHP Internals Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: set the PHP_INI_ENTRY_* values the same as for php.ini-production From: tyra3l@gmail.com (Ferenc Kovacs) hi. We had a discussion about the magic_quotes removal that it is weird that even though that mq was deprecated in 5.3, we still have/had that enabled by default (if you didn't set it from the command line or through a php.ini, the default value which is set from the source by the PHP_INI_ENTRY_* macros). I would propose that the defaul values(PHP_INI_ENTRY_*) and the php.ini-production should be keep in sync as much as possible. for one thing, this would be less confusing (what do we mean by default? PHP_INI_ENTRY_* or the php.ini? why are they different? etc.), the second thing would be the principle of the fail-secure principle: usually the production settings are more secure and less verbose(display_errors for example). what do you think? of course, if this keeps traction, a proper RFC would be needed, but for now, I'm just throwing ideas. --=20 Ferenc Kov=C3=A1cs @Tyr43l - http://tyrael.hu