Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:87300
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.171 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <55B41BEC.20104@garfieldtech.com>
References: <CALYT1Yo-ae+cemXaaXs5Jv5t2DSzdxdYuxuhEGbXyoo_863+bw@mail.gmail.com>
 <55A7D993.5000301@moonspot.net> <55B2D142.6020802@gmail.com> <55B41BEC.20104@garfieldtech.com>
Date: Sun, 26 Jul 2015 20:36:19 +0200
Message-ID: <CAHvhOfi4N+enTEh32iNBfqyStYxtZ0obDMLBapXBOjvZ9CcJGw@mail.gmail.com>
To: Larry Garfield <larry@garfieldtech.com>
Cc: PHP Internals <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Core functions throwing exceptions in PHP7
From: kelerest123@gmail.com (=?UTF-8?B?SmFrdWIgS3Viw63EjWVr?=)

Hi Larry!

2015-07-26 1:29 GMT+02:00 Larry Garfield <larry@garfieldtech.com>:
> Another point here is that 0 is a perfectly legitimate random number in m=
any
> cases, so callers would need to do a =3D=3D=3D check, not just a boolean =
check.
What "boolean check" are you talkin' about? I've never seen a code
using e.g. strpos() like follows:

<?php

if(!is_bool($pos =3D strpos('foobar', 'baz'))) {
    // we are correct, use $pos' value somewhere
} else {
    // strpos() produced a boolean, thus no 'baz' found in 'foobar'
}

?>

Rather it is most frequently being done like below:

<?php

if(FALSE !=3D=3D $pos =3D strpos('foobar', 'baz')) {
    // we are correct, use $pos' value somewhere
} else {
    // strpos() produced a boolean, thus no 'baz' found in 'foobar'
}

?>

I think in both cases you do a kind of "boolean check".

> Especially as we're talking not about a user error but a "your system is =
not setup
> right so it will never work" situation, as I understand it.
So, I generally agree with this approach. It is a better thing to
always fail closed if your system isn't set up, e.g. missing some
required things, to work properly. It's the same if your code uses
some vendor extension not included in the core by default -- it can
not work work properly without having this extension available.

I say +1 for raising a E_ERROR on random_int()/random_bytes() fail.


Best regards,
Kubo2, Jakub Kub=C3=AD=C4=8Dek