Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:59480 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 15797 invoked from network); 8 Apr 2012 22:46:34 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Apr 2012 22:46:34 -0000 Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.160.170 as permitted sender) X-PHP-List-Original-Sender: yohgaki@gmail.com X-Host-Fingerprint: 209.85.160.170 mail-gy0-f170.google.com Received: from [209.85.160.170] ([209.85.160.170:63219] helo=mail-gy0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 23/99-56433-845128F4 for ; Sun, 08 Apr 2012 18:46:32 -0400 Received: by ghbg2 with SMTP id g2so1923308ghb.29 for ; Sun, 08 Apr 2012 15:46:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=8O6JSt+ywJF0Xr59HP9eKYFW9phk3yR6kL13cBzYLBg=; b=M9Cc7rMBjnRaEJFr13Cn+FRrXzZ64RDOk5zR+HA+3+KN9tlCXfhPCXNN9QbhXQCqOr qrconu2kvP8aW/RqzgC5pRrrlhgReUuPjWlIBx9MHujYQxq4aJOKLRUtxZZWFaHY9j4N E1a5VPqn3XlZo8hfFXH88yFcDe135WuuUxSDrawM6WGSJAdwvwPpRO+ydGlERt2jftKH /i7Y6VCMJVrrMQZoGFlEkR/my+Ck8EVXJwxPkvt92xskC07xAafxP6Gw/xgweGyqEJdd 5VR4zWxy5ILKXMBHzefv1O+lcoctdTEP2ninJHWwWXHH4kzqf3ojKbgbQgtRsqPF4LPi Amgw== Received: by 10.236.193.39 with SMTP id j27mr4273585yhn.111.1333925188731; Sun, 08 Apr 2012 15:46:28 -0700 (PDT) MIME-Version: 1.0 Sender: yohgaki@gmail.com Received: by 10.146.86.14 with HTTP; Sun, 8 Apr 2012 15:45:48 -0700 (PDT) In-Reply-To: References: Date: Mon, 9 Apr 2012 07:45:48 +0900 X-Google-Sender-Auth: zSaUnDuLI-jRNBfIExJFE_9Fg5k Message-ID: To: Tom Boutell Cc: PHP Internals Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] RFC: source files without opening tag From: yohgaki@ohgaki.net (Yasuo Ohgaki) Hi, I talked on twitter. Yes, he is kidding, but he is serious, too. I've added the RFC to Under Discussion and added security issue description. I also added my proposal that controls embed mode. BTW, I don't think we need new "require_path" why don't we use require "file.php", ture; or some thing similar? I prefer to use switch, since security countermeasure is better to be enforced by switch. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net 2012/4/9 Tom Boutell : > Moriyoshi was kidding, as near as I can tell (: > > To take it at face value though, the *cough* April 1st *cough* > proposal of Moriyoshi calls for the complete abolition of the feature > with no backwards compatibility with existing code that uses PHP as a > template language... including most popular frameworks that sensibly > obey a separation between class files and template files but still use > PHP rather than a dedicated templating language for templates. > > I don't think that's realistic (and neither did the author it > appears). Since PHP's usability as a template language may conceivably > be improved by other proposals, it is undesirable as well even if you > don't currently find PHP to be a suitable template language. > > Please read my proposal over carefully as it does address the obvious > issues that make Moriyoshi's proposal possibly less than serious in > intent (: > > I would oppose a php.ini flag for this as that gives us two > incompatible versions of the current version of the language to worry > about and makes the feature effectively unusable in reusable code. > This approach has created problems before. > > On Sun, Apr 8, 2012 at 5:55 PM, Yasuo Ohgaki wrote: >> Hi, >> >> There is RFC that is written by Moriyoshi. >> It's not listed in RFC page, though. >> >> https://wiki.php.net/rfc/nophptags >> >> I think these should be merged. >> >> Regards, >> >> -- >> Yasuo Ohgaki >> yohgaki@ohgaki.net >> >> >> >> 2012/4/9 Yasuo Ohgaki : >>> Hi, >>> >>> Moriyoshi has created same entry on 4/1, but >>> it seems it was deleted =A0already. >>> >>> Anyway, he had a patch for it. >>> >>> https://gist.github.com/2266652 >>> >>> As I mentioned in other thread, we should better to have >>> a switch to disable embed mode for security reasons. >>> >>> Regards, >>> >>> -- >>> Yasuo Ohgaki >>> yohgaki@ohgaki.net >>> >>> >>> >>> 2012/4/9 Tom Boutell : >>>> I have written an RFC proposing backwards-compatible support for >>>> source files without an opening >>> >>>> https://wiki.php.net/rfc/source_files_without_opening_tag >>>> >>>> This RFC is not yet listed at https://wiki.php.net/rfc. I am not sure >>>> what the requirements are to get it added to the "Under Discussion" >>>> session and get the ball rolling formally. Please enlighten and I'll >>>> do whatever is required. >>>> >>>> Thanks! >>>> >>>> -- >>>> Tom Boutell >>>> P'unk Avenue >>>> 215 755 1330 >>>> punkave.com >>>> window.punkave.com >>>> >>>> -- >>>> PHP Internals - PHP Runtime Development Mailing List >>>> To unsubscribe, visit: http://www.php.net/unsub.php >>>> > > > > -- > Tom Boutell > P'unk Avenue > 215 755 1330 > punkave.com > window.punkave.com > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php >