Re: [PHP-DEV][RFC][VOTE] Throwable error code's type generalization

2017-01-19 Thread Markus Fischer
Hi, On 06.01.17 18:02, Wes wrote: > Greeting fellow elePHPants and happy new year. > > I've just started the vote for the RFC in subject. You can find it here: > > https://wiki.php.net/rfc/throwable-code-generalization The RFC states: "In practice this is mostly a documentation change ... " Do

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Yasuo Ohgaki
On Mon, Jul 25, 2016 at 11:52 PM, Björn Larsson wrote: > Den 2016-07-22 kl. 17:05, skrev David Rodrigues: > > It's possible to use the tilde ~ easyly on keyboards? >> For on BR/ABNT2 is easy. So maybe use ~> as operator could be fine, >> instead of the triangle |>, and linear sounds good too, lik

[PHP-DEV] PHP 7.1.1 Released

2017-01-19 Thread Joe Watkins
Morning, The PHP development team announces the immediate availability of PHP 7.1.1, several fixes are included in this first patch release of the 7.1 series. All users of 7.1 are encouraged to upgrade. Release Announcement: http://php.net/releases/7_1_1.php Downloads:http://www.php.

[PHP-DEV] Improve (disable|enable)_functions #65386

2017-01-19 Thread Ben RUBSON
Hello, As proposed by cmb (thank you !), I open a discussion regarding req #65386 : https://bugs.php.net/bug.php?id=65386 It summarizes requests around disable_functions directive : - modification of disable_functions to be a PHP_INI_SYSTEM directive ; - implementation of enable_functions as a PH

Re: [PHP-DEV] Re: Improving mt_rand() seed

2017-01-19 Thread Leigh
On 19 January 2017 at 01:10, Yasuo Ohgaki wrote: > > Thank you. I have to be able to modify patch, so I'll fetch your change to > my repo > and make PR. BTW, I don't think we have to care for failing CSPRNG. If it > failed, > application should fail properly, i.e. should terminate process/code. >

Re: [PHP-DEV] Re: Improving mt_rand() seed

2017-01-19 Thread Yasuo Ohgaki
Hi Leigh, On Thu, Jan 19, 2017 at 8:25 PM, Leigh wrote: > > You _do_ have to care if it fails. This is a breaking change if it is > not handled. mt_rand is _not_ a CSPRNG, and therefore the absence of a > CSPRNG should not make mt_rand unusable. If we consider mt_rand only, your statement is t

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Levi Morrison
On Wed, Jul 20, 2016 at 5:42 PM, Sara Golemon wrote: > With the branching of 7.1, and after some reflection on the previous > feedback, I'd like to reopen discussion of the Pipe Operator RFC > https://wiki.php.net/rfc/pipe-operator which I had previously put on > hold. I've changed much of the ar

[PHP-DEV] PHP 7.0.15 available

2017-01-19 Thread Anatol Belski
Hi, The PHP development team announces the immediate availability of PHP 7.0.15. This is a security release. Several security bugs were fixed in this release. All PHP 7.0 users are encouraged to upgrade to this version. For source downloads of PHP 7.0.15 please visit our downloads page: http://w

Re: [PHP-DEV] Re: Improving mt_rand() seed

2017-01-19 Thread Lauri Kenttä
On 2017-01-19 13:46, Yasuo Ohgaki wrote: However, PHP as a whole cannot work reliable way w/o CSPRNG and today's standard requires working CSPRNG, doesn't it? No. Why do you think that PHP can't work without CSPRNG? PHP is a general-purpose programming language. It can be used in a closed en

Re: [PHP-DEV] PHP 7.0.15 available

2017-01-19 Thread Niklas Keller
Hey Anatol and others, > Hi, > > The PHP development team announces the immediate availability of PHP > 7.0.15. > This is a security release. Several security bugs were fixed in this > release. > Could we change our current system and highlight security issues either by color, an icon or even be

Re: [PHP-DEV] Re: Improving mt_rand() seed

2017-01-19 Thread Leigh
On 19 January 2017 at 11:46, Yasuo Ohgaki wrote: > How many of us are willing to allow very weak mt_rand fallback? > This could be RFC vote option, if there are few. Everyone who cares about stability. I agree, if you want to introduce breaking changes, this needs to go to RFC. Therefore the si

[PHP-DEV] UGLY Benchmark Results for PHP Master 2017-01-18

2017-01-19 Thread lp_benchmark_robot
Results for project PHP master, build date 2017-01-18 20:28:55-08:00 commit: 60d075a previous commit:cc91b01 revision date: 2017-01-19 01:23:36+01:00 environment:Haswell-EP cpu:Intel(R) Xeon(R) CPU E5-2699 v3 @ 2.30GHz 2x18 cores, stepping 2, LLC 45 MB

Re: [PHP-DEV] Use decent entropy for uniqid($prefix, TRUE)

2017-01-19 Thread Niklas Keller
2016-12-31 0:20 GMT+01:00 Yasuo Ohgaki : > I'll merge the patch to master (7.2) if there is no comment. > Hi Yasuo, has this been committed? It's just the same BC issue as seeding mt_rand with a CSPRNG by default. Regards, Niklas

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread François Laupretre
Le 19/01/2017 à 13:54, Levi Morrison a écrit : The `|>` symbol would be the piping operator with these semantics: 1. Evaluate the left-hand side. 2. Evaluate the right-hand side. Assert that the result is callable. 3. Pass the result from 1. as the single argument to 2. May I sug

[PHP-DEV] [RFC][Discussion] Binary String Deprecation

2017-01-19 Thread Pedro Magalhães
Hi all. After the previous discussion about the removal of the binary string prefix and cast, I have prepared an RFC to implement a deprecation phase for those. You can find the RFC here: https://wiki.php.net/rfc/binary_string_deprecation Looking forward to hear your feedback on the RFC or the i

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Levi Morrison
On Thu, Jan 19, 2017 at 11:12 AM, François Laupretre wrote: > Le 19/01/2017 à 13:54, Levi Morrison a écrit : >> >> The `|>` symbol would be the piping operator with these semantics: >> 1. Evaluate the left-hand side. >> 2. Evaluate the right-hand side. Assert that the result is callable.

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Ryan Pallas
On Thu, Jan 19, 2017 at 5:54 AM, Levi Morrison wrote: > On Wed, Jul 20, 2016 at 5:42 PM, Sara Golemon wrote: > > With the branching of 7.1, and after some reflection on the previous > > feedback, I'd like to reopen discussion of the Pipe Operator RFC > > https://wiki.php.net/rfc/pipe-operator wh

[PHP-DEV] PHP 5.6.30 is available

2017-01-19 Thread Ferenc Kovacs
Hello! The PHP development team announces the immediate availability of PHP 5.6.29. Several security related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version. According to our release calendar , this PHP 5.6 vers

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Rowan Collins
On Thu, Jan 19, 2017 at 5:54 AM, Levi Morrison wrote: I've talked to you about this RFC off-list, but I figured I should mention it on-list as well. I think we should make `|>` and `$$` two independent operators that work well together (rather than only together). Firstly, Levi, can I say I re

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Ryan Pallas
On Thu, Jan 19, 2017 at 4:08 PM, Rowan Collins wrote: > > > On 19/01/2017 22:17, Ryan Pallas wrote: > >> >> When you say assert the right hand side is callable, does that mean to >> call an object method, you would do [$obj, 'method']? What about >> functions, >> is it just the name like $str |> t

Re: [PHP-DEV] Pipe Operator v2

2017-01-19 Thread Levi Morrison
On Thu, Jan 19, 2017 at 4:55 PM, Ryan Pallas wrote: > On Thu, Jan 19, 2017 at 4:08 PM, Rowan Collins > wrote: >> >> >> On 19/01/2017 22:17, Ryan Pallas wrote: >> >>> >>> When you say assert the right hand side is callable, does that mean to >>> call an object method, you would do [$obj, 'method']

[PHP-DEV] Not autoloading functions

2017-01-19 Thread Rasmus Schultz
Just a quick thought. Since the autoloading functions proposal is stalled, how about allowing for import of static functions instead? use function Foo::bar; bar(); // calls Foo::bar() There are two benefits to this approach: 1. There is immediate support for autoloading without any nee