Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:95064
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.42 as permitted sender)
To: internals@lists.php.net
References: <10fbcb03-5de8-4d9a-da1c-7e2bf77937cb@lsces.co.uk>
 <CAEYWF=4kkvmp8TCmRhdhzzM-sWpk+-sYE7u2eP1Jf3NkshFiJA@mail.gmail.com>
 <CABdc3WqYeoXoHL-E4adjoZTVr1bs1CHfRaDmoqtmpGW7yREmUA@mail.gmail.com>
 <c76f0716-4881-4aae-2fbd-f1af70fd6114@lsces.co.uk>
 <CANUQDCjaXeJsCAjyE+q-UhXCFjexwRYWLKzMfwRQVDaEwVbLog@mail.gmail.com>
 <d67a6ee8-4fbe-9583-3bac-d2e98298663f@lsces.co.uk>
 <5657afc7-7569-5fc4-4a5a-27ed786c4fa5@gmail.com>
 <0825c173-5cb4-7f65-cf34-b45ca30919a3@lsces.co.uk>
 <8646c3ad-b929-cb0b-bad4-52a0a7160d16@gmail.com>
 <11ce571b-964b-5a3e-9f2f-3f69a8bc20b4@lsces.co.uk>
 <7d9db8d5-ae7a-4123-14f4-f76fb6d764c5@gmail.com>
 <a25c0473-aa5f-7a1a-d1c9-0c8eebfd1188@lsces.co.uk>
Message-ID: <24e9b0e6-f1f7-e6b7-0c6d-69e5ae1922cd@gmail.com>
Date: Fri, 12 Aug 2016 09:54:35 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <a25c0473-aa5f-7a1a-d1c9-0c8eebfd1188@lsces.co.uk>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] Simple variable handling.
From: rowan.collins@gmail.com (Rowan Collins)

On 12/08/2016 09:19, Lester Caine wrote:
> I'm thinking
> $var->setConstraint()
> $var->setEscape()
> $var->setReadOnly()
>
> Rather than having to build 'reflections' classes to pull out data that
> a simple $var->is_valid or echo $var will output a correctly escaped
> piece of text.

Note that as discussed on the recent RFC thread, escape mechanisms are 
very much specific to the *destination* of the data not the *source*. So 
having "echo $foo" call "echo $foo->escape()" isn't going to work.

I guess you could have "echo $foo->forHTML()" with some kind of fallback 
that converts that to "echo htmlspecialchars($foo)" if nothing further 
is defined. Or "echo_html( $foo )" calling "$foo->forHTML()" internally 
if it's been defined against the variable. I haven't thought this 
through fully, just throwing ideas out there.

Regards,
-- 
Rowan Collins
[IMSoP]