[PHP-DEV] session_regenerate_id concurrency problems

[Vinicius Dias]

Hello, internals. I hope you all are well.

The documentation page for the `session_regenerate_id`[1] function has
the following warning:

> **Warning**
Currently, session_regenerate_id does not handle an unstable network
well, e.g. Mobile and WiFi network. Therefore, you may experience a
lost session by calling session_regenerate_id.
You should not destroy old session data immediately, but should use
destroy time-stamp and control access to old session ID. Otherwise,
concurrent access to page may result in inconsistent state, or you may
have lost session, or it may cause client(browser) side race condition
and may create many session ID needlessly. Immediate session data
deletion disables session hijack attack detection and prevention also.

Since the documentation states that this problem exists **currently**,
are there any plans to address it?

Thank you all in advance.

[1]: https://www.php.net/session_regenerate_id

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: https://www.php.net/unsub.php

[PHP-DEV] Re: [RFC] [Vote] PHP 8.3 deprecations

[Máté Kocsis]

Hi Everyone,

The votes have ended with the following results:

- "Passing negative $widths to mb_strimwidth()": accepted (27 vs. 0 votes)
- "The NumberFormatter::TYPE_CURRENCY constant": accepted (29 vs. 0 votes)
- "Unnecessary crypt() related constants": rejected (14 vs. 10 votes)
- "MT_RAND_PHP": accepted (28 vs. 0 votes)
- "Global Mersenne Twister": rejected (13 vs. 16 votes)
- "Calling ''ldap_connect'' with 2 parameters": accepted (26 vs. 0 votes)

Thanks for everyone for their participation!

Regards,
Máté

Máté Kocsis  ezt írta (időpont: 2023. jún. 22., Cs
12:14):

> Hi Everyone,
>
> As previously announced on the list, we have just started the vote about
> the annual PHP deprecation RFC.
>
> Link to the RFC: https://wiki.php.net/rfc/deprecations_php_8_3
> Link to the discussion thread: https://externals.io/message/120422
>
> The vote is open until 2023-07-06 12:00:00 UTC.
>
>

[PHP-DEV] PHP 8.1.21 Released

[Patrick ALLAERT]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

The PHP development team announces the immediate availability of PHP
8.1.21.
This is a bugfix release.

All PHP 8.1 users are encouraged to upgrade to this version.

For source downloads of PHP 8.1.21 please visit our downloads page. Windows
binaries can be found on the PHP for Windows site. The list of changes is
recorded in the ChangeLog.

Release Announcement: 
Downloads:
Windows downloads:
Changelog:
Release Manifest:


Many thanks to all the contributors and supporters!

Patrick Allaert, Ben Ramsey & Joe Watkins

php-8.1.21.tar.bz2
SHA256 hash:
6ea49e8335d632177f56b507160aa151c7b020185789a9c14859fce5d4a0776d
PGP signature:
- -BEGIN PGP SIGNATURE-
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=9vta
- -END PGP SIGNATURE-

php-8.1.21.tar.gz
SHA256 hash:
a95f8d35924aa5705ad07a70dc994bf41b5d45126ecdec7aaad6edfbe5e1c37f
PGP signature:
- -BEGIN PGP SIGNATURE-
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=2lZW
- -END PGP SIGNATURE-

php-8.1.21.tar.xz
SHA256 hash:
e634a00b0c6a8cd39e840e9fb30b5227b820b7a9ace95b7b001053c1411c4821
PGP signature:
- -BEGIN PGP SIGNATURE-
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=Za8s
- -END PGP SIGNATURE-
-BEGIN PGP SIGNATURE-
Version: FlowCrypt Email Encryption 8.4.8
Comment: Seamlessly send and receive encrypted email
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=SyBm
-END PGP SIGNATURE-

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: https://www.php.net/unsub.php

[PHP-DEV] PHP 8.2.8 Released

[Sergey Panteleev]

The PHP development team announces the immediate availability of PHP
8.2.8. This is a bugfix release.

All PHP 8.2 users are encouraged to upgrade to this version.

For source downloads of PHP 8.2.8 please visit our downloads page.
Windows binaries can be found on the PHP for Windows site.
The list of changes is recorded in the ChangeLog.

Release Announcement: https://php.net/releases/8_2_8.php
Downloads: https://php.net/downloads
Windows downloads: https://windows.php.net/download#php-8.2
Changelog: https://php.net/ChangeLog-8.php#8.2.8
Release Manifest:
https://gist.github.com/saundefined/ab8555259b8ef5af516d3661ac2535ff

Many thanks to all the contributors and supporters!

Pierrick Charron, Sergey Panteleev & Ben Ramsey


php-8.2.8.tar.bz2
SHA256 hash: 995ed4009c7917c962d31837a1a3658f36d4af4f357b673c97ffdbe6403f8517
PGP signature:
-BEGIN PGP SIGNATURE-
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=/9JJ
-END PGP SIGNATURE-


php-8.2.8.tar.gz
SHA256 hash: 6419b74e9b675c8d5a1afd2788c4d7996a19bbe2be409716ccb2067897af9df1
PGP signature:
-BEGIN PGP SIGNATURE-
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=TlsR
-END PGP SIGNATURE-


php-8.2.8.tar.xz
SHA256 hash: cfe1055fbcd486de7d3312da6146949aae577365808790af6018205567609801
PGP signature:
-BEGIN PGP SIGNATURE-
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=jsR0
-END PGP SIGNATURE-

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: https://www.php.net/unsub.php

[PHP-DEV] PHP 8.3.0alpha3 is available for testing

[Jakub Zelenka]

PHP 8.3.0alpha3 has just been released and can be downloaded from:
https://downloads.php.net/~jakub
Or use the git tag: php-8.3.0alpha3

Windows binaries are available at: https://windows.php.net/qa/

This is the third official release of the PHP 8.3 serial and includes
an incredible amount of work.
Please test it carefully, and report any bugs at
https://github.com/php/php-src/issues

8.3.0beta1 should be expected in 2 weeks, i.e. on 20 Jul 2023.
Hash values and PGP signatures can be found below or at
https://gist.github.com/bukka/9324ba069ce9588c5000a60fbb8cccbb

Thank you, and happy testing!

Regards,
Jakub Zelenka & Eric Mann

php-8.3.0alpha3.tar.bz2
SHA256 hash:
181db88f226dfb9592a2f921038ff147f88b4f07c5f26240a897dcc4cb18496a
PGP signature:
-BEGIN PGP SIGNATURE-

iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZKRjkgAKCRAcB3ncXAqd
5JQVAP9VhXxcK/UJtEJUKTCS6u2bcOIUk9jiyXUekDYUikhxdgD/WabLw7uPCm+5
qXA6epxoURUKUD4nRLimBan21o0TmAM=
=RavV
-END PGP SIGNATURE-


php-8.3.0alpha3.tar.gz
SHA256 hash:
2651743962cf9c73f3cabeca7de6399c9a7e2b62ecfca69aa8f168187ee19f4c
PGP signature:
-BEGIN PGP SIGNATURE-

iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZKRjkgAKCRAcB3ncXAqd
5IFrAP4l7WdhTiJdn3pHDABDK3Jld5ritDycoawvfPIHImq54AD9FotuG1qPu/9I
qaQdhOrrB8/JW9TrJGuDm8Gu62zDog4=
=ZK3z
-END PGP SIGNATURE-


php-8.3.0alpha3.tar.xz
SHA256 hash:
2a8d12479648b1d33212678ceb9cc55386c253b7fbc6988304c7f4a1dfe4bfc9
PGP signature:
-BEGIN PGP SIGNATURE-

iHUEABYIAB0WIQTCjZN1dWA+tKu3JYYcB3ncXAqd5AUCZKRjkgAKCRAcB3ncXAqd
5AksAQDpFKDznttfR9SQzofrjaKHiHBoQbrFZj+cMxqSXsrJPwEAkWuxPItueUbs
CtUtGIf5OvLnUGpNs8U1sqO9o5jlAwA=
=867C
-END PGP SIGNATURE-

Re: [PHP-DEV] ??= and function calls

[mickmackusa]

I didn't even realize that there was a difference between preincrementation
and postincrementation when used in array access.

I guess this is because my default preference is preincrementation and also
that I probably don't use a lot of incrementation while accessing array
data.

I held a false belief that the different syntaxes only mattered when
echoing.

$x = 0;
$array1[1] = 43;
$array1[++$x] ??= 42;
var_dump($x, $array1);

echo "\n---\n";

$y = 0;
$array2[0] = 43;
$array2[$y++] ??= 42;
var_dump($y, $array2);

Thanks Ilija

mickmackusa