Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:57739
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.170 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <60BDBA28-4E97-4C60-8E31-E34F7E4831AC@gmail.com>
References: <CAF+90c9qoyzBf+FpBxMdX0FByy5xB+7x3xi3kNxdvWX=_uz=mg@mail.gmail.com>
	<CAEZPtU7mYOB6RTHPFb8B76bPsZiFki6J5sJCMViGD7vK8Fdiyg@mail.gmail.com>
	<4F2EAF7D.9080506@thelounge.net>
	<CAORXhGKBPehGLvZsj9D4Oi2Fo4FnV+esyg_QNkuv3cO7uFn6qw@mail.gmail.com>
	<60BDBA28-4E97-4C60-8E31-E34F7E4831AC@gmail.com>
Date: Sun, 5 Feb 2012 18:22:53 +0100
Message-ID: <CAEZPtU4UvYb1LbY6PT0Lq+oDfyS4BYa8+D7bYUDKwz05KRP9ZQ@mail.gmail.com>
To: Michael Stowe <mikegstowe@gmail.com>
Cc: Tom Boutell <tom@punkave.com>, Reindl Harald <h.reindl@thelounge.net>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [PHP-DEV] [RFC] Deprecate and remove /e modifier from preg_replace
From: pierre.php@gmail.com (Pierre Joye)

hi,

On Sun, Feb 5, 2012 at 5:45 PM, Michael Stowe <mikegstowe@gmail.com> wrote:

> Perhaps another option, if it's a security concern is the ability to turn off the /e modifier, and have it off by default. This way we can protect our less experienced programmers, while keeping it available for more advanced use cases.

That sounds like a nicer approach and it is actually one of the RFC I
like to see to bring some of the features of Suhosin in PHP (disable
eval and the e modifier).

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org