Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:55361
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain thelounge.net designates 91.118.73.15 as permitted sender)
Message-ID: <4E6C6E0B.6050402@thelounge.net>
Date: Sun, 11 Sep 2011 10:15:07 +0200
Organization: the lounge interactive design
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:6.0.2) Gecko/20110906 Thunderbird/6.0.2
MIME-Version: 1.0
To: internals@lists.php.net
References: <4E6C39AC.3000607@yahoo.co.jp>
In-Reply-To: <4E6C39AC.3000607@yahoo.co.jp>
OpenPGP: id=7F780279;
	url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enig00088A246662B43E763837FD"
Subject: Re: [PHP-DEV] proposal for change the argument of parse_str/mb_parse_str
From: h.reindl@thelounge.net (Reindl Harald)

--------------enig00088A246662B43E763837FD
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable



Am 11.09.2011 06:31, schrieb Rui Hirokawa:
> Hello,
>=20
> I think the second argument of parse_str/mb_parse_str
> should be changed from optional to mandatory.
> parse_str(string encoded_string [, array result])
> -> parse_str(string encoded_string , array result)

no because there is no reason and all what will happen is

parse_str($a, $b);
extract($b);

so please leave us in peace with the need to add the second line

> It is to reduce the risk of vulnerability, and it has neary same risk
> as register_globals which is removed from PHP 5.4

it has not, inside a function this is absolutely safe and if
you are writing spaghetti-code nothing can help you


--------------enig00088A246662B43E763837FD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5sbgsACgkQhmBjz394AnmZ7ACfbhQmS90VMb7/J9CnSgwEzxdf
crMAnijbzPOT8JjjDAhKP41Qwc8Mv5d6
=Dge1
-----END PGP SIGNATURE-----

--------------enig00088A246662B43E763837FD--