Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:59490 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 57588 invoked from network); 9 Apr 2012 09:17:25 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 9 Apr 2012 09:17:25 -0000 Authentication-Results: pb1.pair.com header.from=wgpdeepak1989@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=wgpdeepak1989@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) X-PHP-List-Original-Sender: wgpdeepak1989@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-ob0-f170.google.com Received: from [209.85.214.170] ([209.85.214.170:56089] helo=mail-ob0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id C7/40-56433-229A28F4 for ; Mon, 09 Apr 2012 05:17:23 -0400 Received: by obbeh20 with SMTP id eh20so5986928obb.29 for ; Mon, 09 Apr 2012 02:17:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=njq/HPW2ndbzoIL3yHhaXwfXQkxOLTPkm0n6u54SNKQ=; b=mfLW1hMEGHpTvvGmV+5NO/BX3/ZqeMXYYkqe2WYHLI7FLEEVUfSmlAIatp2lsIhEen KGxSMHI3eMuRaH4m0sK1Htz9bxzBZp+pAPwE1h/kytslukbBfqgAGC9ieWgCGZP0V9Ct WbySgfnwFK4t+iYBDqsmb2DK9cyA2vWSia0Nl3L7QPOR0aUtrLhROGqk8Y+AjzR+3d07 vBxWBjkRQQZg/kr2ERbu8qy655kOdmfqoxNKwrdCGHE2qBjlcDfeD0Dx1yYMAJD3cBLb LELXQVxHVdTxZZWmiqiTpbJe5+y1fVw/knaGU62kcPpnSEFafHuYJPjPuzX5PQ9upCL3 aa2A== MIME-Version: 1.0 Received: by 10.182.141.9 with SMTP id rk9mr8990679obb.50.1333963040558; Mon, 09 Apr 2012 02:17:20 -0700 (PDT) Received: by 10.60.42.163 with HTTP; Mon, 9 Apr 2012 02:17:20 -0700 (PDT) In-Reply-To: References: <4F80C739.2060404@gmail.com> Date: Mon, 9 Apr 2012 14:47:20 +0530 Message-ID: To: Yasuo Ohgaki Cc: PHP Internals Content-Type: multipart/alternative; boundary=e89a8f6428ec2d0d3a04bd3b7946 Subject: Re: [PHP-DEV] PHP class files without wrote: > Hi, > > 2012/4/9 Arvids Godjuks : > > And you get same issues that existed with magic quotes, register > variables, > > safe mode and other optional stuff that was required to run application > when > > set specificaly and it would break if something set differently. PHP just > > got rid of it and you want to introduce a new optional feature that will > > change how PHP behaves. > > Magic Quotes is broken by design. > Register Globals may work but erroneous. > Safe Mode was great for fail safe, but it was misunderstood. > Therefore, they are removed. > > All of these are security related changes why not for > mandatory embed mode? > > There were full of embedded PHP pages 10 years ago. > Only template pages require embedded PHP script now. > > There is no compatibility issue for current code. > New code that adopts non-embed scripting will enjoy > better security than now. > > Embed w/o option would be the last existing PHP feature > that other language programmers may call "PHP is insecure > than my language" IMO > > Regards, > > -- > Yasuo Ohgaki > yohgaki@ohgaki.net > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > > --e89a8f6428ec2d0d3a04bd3b7946--