Hi all!
I am preparing a Server Side Scripting (using PHP) course for the Web
Standards Project Interact[1]. As I am going through security
considerations I note that the ctype functions are being used in the
manual[2] and have not been deprecated in 5.3. I have, however, been
told that they are not, nor ever will be, Unicode compatible.[3]
If that indeed is the case:
A. Should they not be deprecated formally, including giving an
appropriate error when used? (Yes, that will give some people, like me,
lots of errors. But I rather take them now than have my code blow up on
me in the future.)
B. Should not the the manual be telling people about these functions
being non-future proof?
--
Keryx Web (Lars Gunther)
http://keryx.se/
http://twitter.com/itpastorn/
http://itpastorn.blogspot.com/
- http://interact.webstandards.org/
- http://www.php.net/manual/en/security.filesystem.php
- http://marc.info/?l=phpdoc&m=119678432606169
P.S. If you are interested in helping us at WaSP make an awesome
curriculum for our PHP course, contact me off list.
Hi all!
I am preparing a Server Side Scripting (using PHP) course for the Web
Standards Project Interact[1]. As I am going through security considerations
I note that the ctype functions are being used in the manual[2] and have not
been deprecated in 5.3. I have, however, been told that they are not, nor
ever will be, Unicode compatible.[3]If that indeed is the case:
A. Should they not be deprecated formally, including giving an appropriate
error when used? (Yes, that will give some people, like me, lots of errors.
But I rather take them now than have my code blow up on me in the future.)B. Should not the the manual be telling people about these functions being
non-future proof?
I believe the latest discussion settled on rewriting ctype_* functions to
use ICU internally in HEAD, so that they work correctly on Unicode strings.
-Andrei
I believe the latest discussion settled on rewriting ctype_* functions
to use ICU internally in HEAD, so that they work correctly on Unicode
strings.-Andrei
That simplifies things. I actually believe that the word about this has
to spread, since I am not the only one with the impression that these
functions are going.[1][2][3]
I can not find any open bugs on this, but did find the meeting notes
that confirms Andrei's message.[4]
As for mixed messages. Is not the fact that they are listed on this
page: http://www.php.net/~scoates/unicode/render_func_data.php an
indication that the work already has been done?
Also: Am I correct in assuming that the new ICU-based ctype functions
will use locale_set_default() instead of setlocale()?
(A side note: Will the preg-functions continue to use setlocale()?)
And finally, I hope my asking these questions are not out of place. I
chose this list since I need authoritative answers and my questions are
about internals issues. I beg your forgiveness if I have contributed to
any unnecessary noise.
--
Keryx Web (Lars Gunther)
http://keryx.se/
http://twitter.com/itpastorn/
http://itpastorn.blogspot.com/
Please forgive me bumping this, bit I think my questions are valid and I
can't find authoritative and relevant info on php.net or Google.
If indeed I have broken protocol, as feared in my ending, could anyone
please tell me so (off list in order to reduce the noise, of course) and
kindly point me to a better place to ask these questions?
I believe the latest discussion settled on rewriting ctype_* functions
to use ICU internally in HEAD, so that they work correctly on Unicode
strings.-Andrei
That simplifies things. I actually believe that the word about this has
to spread, since I am not the only one with the impression that these
functions are going.[1][2][3]I can not find any open bugs on this, but did find the meeting notes
that confirms Andrei's message.[4]As for mixed messages. Is not the fact that they are listed on this
page: http://www.php.net/~scoates/unicode/render_func_data.php an
indication that the work already has been done?Also: Am I correct in assuming that the new ICU-based ctype functions
will uselocale_set_default()instead ofsetlocale()?(A side note: Will the preg-functions continue to use
setlocale()?)And finally, I hope my asking these questions are not out of place. I
chose this list since I need authoritative answers and my questions are
about internals issues. I beg your forgiveness if I have contributed to
any unnecessary noise.
--
Keryx Web (Lars Gunther)
http://keryx.se/
http://twitter.com/itpastorn/
http://itpastorn.blogspot.com/
Please forgive me bumping this, bit I think my questions are valid and I
can't find authoritative and relevant info on php.net or Google.
The future has yet to be written. All we can do is to predict.
The current prediction is that ctype will use the ICU functionality.
-Hannes