Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:68464
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.42 as permitted sender)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
In-Reply-To: <5204B690.4060006@lsces.co.uk>
References: <CAGa2bXbn_U9GBnskNwdJqDzFpBXeucT-Q7SoQ3hmQ59u-6=KDw@mail.gmail.com>
 <5202EE67.5020307@sugarcrm.com> <CAGa2bXYr3neNJg7fATdLH3V-qc2rDHbVKg2AzOsaU0LjWa3iuw@mail.gmail.com>
 <5202FC8A.2070307@sugarcrm.com> <CAGa2bXYdwZLfadyNm+mUpw9mHmQS9Ybh013hs73CMW=e-UnwxA@mail.gmail.com>
 <CAGa2bXbUD7sDAteUFncw6gYVjN4etw1fPT0eDK3CAXrEzc-oWA@mail.gmail.com>
 <52035622.1090301@lsces.co.uk> <CAGa2bXaHyONvikGLvuNLxPJ9nrtqs=HxXcFJJg5_raC5tyF70A@mail.gmail.com>
 <CAPwsocHeQxiwhCE5=4S5ii9vZy8KmU9XCLRrRgA0MnZf0G67vQ@mail.gmail.com>
 <CAGa2bXY9+raaFikqpbWFwgUvOxeQr7naPXR92s9HXsRiPXdmbw@mail.gmail.com>
 <CAPwsocFL=pBc_KEZ3hFjTjpaXxF5HHGzy8V8_WUYa8+SpX0oKw@mail.gmail.com>
 <CAGa2bXbywtEyPmE-G4TDk-ofWAXpK-sL18AanJ40Bmq-9vAokg@mail.gmail.com>
 <CAPwsocGf6L2a1+iQq6-HXTAwE5Gv_HtFnUS8_6s-1XA3nin5Fw@mail.gmail.com>
 <52038ABF.8060904@lsces.co.uk> <CAGa2bXabMOJUR6_PO-AgEQ4SKSnG5F-gQrOFeF7U=66LyuYn=w@mail.gmail.com>
 <CAPwsocEesVo23dFrut0gT8p=Bp8SraEAZAD61qKUPW6FGZ783A@mail.gmail.com> <5204B690.4060006@lsces.co.uk>
Date: Fri, 9 Aug 2013 18:54:59 +0900
Message-ID: <CAGa2bXbLFzDkW834gTM=G8rDXOk47Z_AO1B6eRpNT_vRMWq5CA@mail.gmail.com>
To: Lester Caine <lester@lsces.co.uk>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=089e0158c432e8927604e380c617
Subject: Re: [PHP-DEV] "php_serialize" session serialize handler
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--089e0158c432e8927604e380c617
Content-Type: text/plain; charset=UTF-8

Hi Lester,

On Fri, Aug 9, 2013 at 6:29 PM, Lester Caine <lester@lsces.co.uk> wrote:

> Leigh wrote:
>
>>     How php_serialize would cause BC issues for PHP users?
>>
>> Not everyone uses PHP in the way you would expect. Just how many sites
>> out there
>> do you think use PHPs session functionality? I'd go for hundreds of
>> millions,
>> and that's a pretty big target to hit.
>>
>> If you session_encode() something on 5.x with default settings and 5.x+1
>> cannot
>> session_decode() it with default settings, that is a BC break.
>>
>
> My own concerns with much of this are due to third party libraries using
> some 'new approach' which requires a particular setup such as changing a
> default, but another library still requires the old way of working. THAT is
> the problem.



On Fri, Aug 9, 2013 at 6:26 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

> Mixing versions with shared data should be carefully handled for almost
> all apps.
> Even if this is the case, users may use old serializer so no BC.
>
> Anyway, we also have to consider number of bug/request reports that it
> solves.
> There are countless bug reports that were closed as "won't fix"/"not a
> bug"
> because of the register_globals support in session module.
>

As I wrote, there is no real BC issue as it's just a matter of ini setting.

It's sounded like denial of improvement and removal of misdesigned
component.
I'm not going to remove old one, though. Search bug db, there are many
bug reports/feature requests that this patch solves.

If users aren't reading release note of minor version up, then it is users'
fault,
not ours. If it is, we cannot release new PHP.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--089e0158c432e8927604e380c617--