> > You guys can write your own implementation and put it in PECL alongside > > the one I am putting in there and we can decide if any of them should be > > bundled by default. Perhaps none of them should, but like it or not, > > people want to filter at this level and the extension to satisfy this > > need will be available to them in PECL. > > Yes, there should be an extension that implements the filter functions - > but the normal data should still be available like it is in PHP 4.3 and > PHP 5.0. Adding an ext for those filters is a good thing, mangling > request data isn't (see the magic_quotes_gpc mess). > > Derick
I agree very much with you on this. If PHP coders who are no admins on the server themselves have to start worrying about a default filter, that means they will have to filter all input because the default filter could be or might become something they don't want to see. And in that case, there's no use for a default for them anymore, they simply have to manually filter everything, just so they can get to their raw data. This whole default setting adds an uncertainty which will add a lot of lines of code. Please don't make the magic_quotes_gpc mistake again, because in my humble opinion, that was the worst thing that ever happened to PHP. Ron -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php
