Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72019
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.180 as permitted sender)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
In-Reply-To: <CAL0xaBF7mCCRXEve2qxeGs41FwvBPh4jbQQT4UB_wJzw6HZazA@mail.gmail.com>
References: <CAGa2bXbq1ttBz+hSk20-CkKWvDdHr5+8bBmc04Q22i7K2VSs+A@mail.gmail.com>
 <52EE1EDC.2010309@sugarcrm.com> <CAGa2bXZZ3ug3oWg_im5bHUDjo2EHVeBMqU0fvB4WU-4OZTMCuw@mail.gmail.com>
 <CAL0xaBF7mCCRXEve2qxeGs41FwvBPh4jbQQT4UB_wJzw6HZazA@mail.gmail.com>
Date: Mon, 3 Feb 2014 07:51:03 +0900
Message-ID: <CAGa2bXaa9ZN86-hZTPeHq4NtbuSOLuv3qeK+dSgPgDOqeymNfg@mail.gmail.com>
To: Arvids Godjuks <arvids.godjuks@gmail.com>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a1133a92244464404f1744096
Subject: Re: [PHP-DEV] Extending uniqid() or not?
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a1133a92244464404f1744096
Content-Type: text/plain; charset=UTF-8

Hi Arvids,

On Mon, Feb 3, 2014 at 7:41 AM, Arvids Godjuks <arvids.godjuks@gmail.com>wrote:

> My personal view is that we need to start to beef up the default PHP
> security, and a lot. Kind'a what has been done with the password API, also
> needs to be done with a lot of stuff to make it's usage much easier and
> much more secure by default.
>
> And although I get the general feeling that PHP 5.6 has low probability of
> getting such changes as this, PHP 6 by all indications is around the corner
> and stuff like this has to go into it.
>

I would like to do it for escape functions and more sophisticated input
validater,
but it wouldn't happen in 5.6 as you expect.

For the time being, I would like to make features a little stronger,
provide better function for misused function and/or document them more
explicitly.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a1133a92244464404f1744096--