Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Reindl Harald
Am 19.07.2011 01:12, schrieb Ferenc Kovacs: since this is default OFF there is no warning if not configured empty php.ini implicits = Off sadly no: tyrael@thor:~/checkouts$ php -n -r 'echo PHP_VERSION.\n;echo ini_get(magic_quotes_gpc).\n;' 5.3.6-6~dotdeb.1 1

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Ferenc Kovacs
On Tue, Jul 19, 2011 at 8:53 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 19.07.2011 01:12, schrieb Ferenc Kovacs: since this is default OFF there is no warning if not configured empty php.ini implicits = Off sadly no: tyrael@thor:~/checkouts$ php -n -r 'echo PHP_VERSION.\n;echo

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Reindl Harald
Original-Nachricht Betreff: Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle Datum: Tue, 19 Jul 2011 09:07:51 +0200 Von: Ferenc Kovacs tyr...@gmail.com An: Reindl Harald h.rei...@thelounge.net CC: internals@lists.php.net magic_quotes_gpc is deprecated as of 5.3

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Lester Caine
Reindl Harald wrote: magic_quotes_gpc is deprecated as of 5.3 http://php.net/manual/en/migration53.deprecated.php only the default values was left to 1 how dumb is this? if i deprecate something i do not like to use it in future and at the same time i enable it as default? there is no logical

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Arvids Godjuks
Hello. I have only one question - is really that many old applications able to run on 5.3 who require magic_quotes, safe mode, register globals and other legacy stuff? How long are you planing on keeping the BC? 10 years, 15 years? Maybe 20? Reality is - break it in 5.4 or in 6.0 in two-three

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Reindl Harald
Am 19.07.2011 10:41, schrieb Lester Caine: Reindl Harald wrote: magic_quotes_gpc is deprecated as of 5.3 http://php.net/manual/en/migration53.deprecated.php only the default values was left to 1 how dumb is this? if i deprecate something i do not like to use it in future and at the same

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Richard Quadling
On 19 July 2011 09:57, Reindl Harald h.rei...@thelounge.net wrote: anybody who maintains a server should make a explicit config and not relying on random defaults Consider me told. Amazed that a 2 year old deprecation notice is still outstanding, but told all the same. I think, rather than

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Lester Caine
Reindl Harald wrote: magic_quotes_gpc is deprecated as of 5.3 http://php.net/manual/en/migration53.deprecated.php only the default values was left to 1 how dumb is this? if i deprecate something i do not like to use it in future and at the same time i enable it as default? there

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Pierre Joye
done. On Mon, Jul 18, 2011 at 8:27 PM, Pierre Joye pierre@gmail.com wrote: yes, I do use the latest versions, always if there are security related fixes in them. Thanks for the headup! On Mon, Jul 18, 2011 at 8:05 PM, James Yu jym2...@gmail.com wrote: HI, A venerability issue was

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Reindl Harald
Am 19.07.2011 12:20, schrieb Lester Caine: Reindl Harald wrote: magic_quotes_gpc is deprecated as of 5.3 http://php.net/manual/en/migration53.deprecated.php only the default values was left to 1 how dumb is this? if i deprecate something i do not like to use it in future and

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Pierre Joye
May I ask you guys to stay on topic? I posted the steps to remove it. There are only two open questions about the warning level for the setter (or to kill them) and that's all. Everything else is off topic. Please don't hijack this thread any longer :) On Tue, Jul 19, 2011 at 12:29 PM, Reindl

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Reindl Harald
well ON TOPIC: deprecate it, throw a warning and set default to off if you can not set default to off for whatever reason you can not deprecate it - so simple the things are Am 19.07.2011 12:31, schrieb Pierre Joye: May I ask you guys to stay on topic? I posted the steps to remove it.

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Richard Quadling
On 19 July 2011 11:25, Pierre Joye pierre@gmail.com wrote: done. And thank you for the update to http://windows.php.net/downloads/php-sdk/deps -- Richard Quadling Twitter : EE : Zend : PHPDoc @RQuadling : e-e.com/M_248814.html : bit.ly/9O8vFY : bit.ly/lFnVea -- PHP Internals - PHP

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Pierre Joye
global pkg is not but the standalone one is On Tue, Jul 19, 2011 at 12:59 PM, Richard Quadling rquadl...@gmail.com wrote: On 19 July 2011 11:25, Pierre Joye pierre@gmail.com wrote: done. And thank you for the update to  http://windows.php.net/downloads/php-sdk/deps -- Richard

Re: [PHP-DEV] is gcov.php.net still useful?

2011-07-19 Thread Rafael Dohms
On Mon, Jul 18, 2011 at 6:47 PM, Nuno Lopes nlop...@php.net wrote: Hi, So, is it worth it? Speaking as a organizer of PHP TestFest events i think GCOV is one of our most used tools to figure out what needs testing, all of our test writers need this resource to look into this. -- Rafael

[PHP-DEV] changes in the bugsweb

2011-07-19 Thread Ferenc Kovacs
Hi guys. a few days ago I did a little modifications on web/php-bugs/trunk/include/php_versions.php so now it fetch the version information from http://qa.php.net/api.php and http://www.php.net/releases/index.php so if everything goes well, yo don't need to change the php_versions.php anymore.

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Richard Quadling
Yep. Got it! I've just tried rebuilding my PHP (5.3 and 5.4). Both getting the same linker error. [snip] xbm.c rc /n /fo Release\php_gd2.dll.res /d FILE_DESCRIPTION=\GD imaging\ /d FILE_NAME=\php_gd2.dll\ /d URL=\http://www.php.net\; /d INTERNAL_NAME=\GD extension\ /d

Re: [PHP-DEV] is gcov.php.net still useful?

2011-07-19 Thread Michael Stowe
I didn't know about gcov until a couple days ago, but just poking around I think its fairly useful, if nothing else to see where potential vulnerabilities may lie, as well as a quick, convenient way to check out the internal code. Thanks, Mike On Tue, Jul 19, 2011 at 6:44 AM, Rafael Dohms

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Richard Quadling
Toggling between libpng-1.2.45-vc9-x86.zip and libpng-1.2.46-vc9-x86.zip and 1.2.45 works for me but 1.2.46 doesn't. On 19 July 2011 13:15, Richard Quadling rquadl...@gmail.com wrote: Yep. Got it! I've just tried rebuilding my PHP (5.3 and 5.4). Both getting the same linker error. [snip]

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Pierre Joye
yes, seeing that on the builds log as well. No idea yet what causes this problem as I do not see a relevant change in the libpng changelog. Stay tuned. On Tue, Jul 19, 2011 at 3:42 PM, Richard Quadling rquadl...@gmail.com wrote: Toggling between libpng-1.2.45-vc9-x86.zip and

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Pierre Joye
please try again (fetch the lib again) On Tue, Jul 19, 2011 at 3:42 PM, Richard Quadling rquadl...@gmail.com wrote: Toggling between libpng-1.2.45-vc9-x86.zip and libpng-1.2.46-vc9-x86.zip and 1.2.45 works for me but 1.2.46 doesn't. On 19 July 2011 13:15, Richard Quadling rquadl...@gmail.com

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Daniel Convissor
Hi Derick: On Mon, Jul 18, 2011 at 05:23:58PM +0100, Derick Rethans wrote: Doesn't that mean that anybody not running a php.ini file will just always get this warning/error? I wouldn't want that as a php.ini file should be optional. Yeah, that's problematic. What are your thoughts as to

Re: [PHP-DEV] [RFC] Magic Quotes in PHP, the Finalle

2011-07-19 Thread Pierre Joye
On Tue, Jul 19, 2011 at 5:26 PM, Daniel Convissor dani...@analysisandsolutions.com wrote: Hi Derick: On Mon, Jul 18, 2011 at 05:23:58PM +0100, Derick Rethans wrote: Doesn't that mean that anybody not running a php.ini file will just always get this warning/error? I wouldn't want that as a

Re: [PHP-DEV] PHP 5.3.7, upgrade Libpng to 1.2.45

2011-07-19 Thread Richard Quadling
That seems to be linking just fine. Thank you. On 19 July 2011 16:23, Pierre Joye pierre@gmail.com wrote: please try again (fetch the lib again) On Tue, Jul 19, 2011 at 3:42 PM, Richard Quadling rquadl...@gmail.com wrote: Toggling between libpng-1.2.45-vc9-x86.zip and

Re: [PHP-DEV] is gcov.php.net still useful?

2011-07-19 Thread Nuno Lopes
The gcov.php.net machine is about to die. Nexcess (the owner) already offered us the possibility to get a replacement. However, before accepting their offer I would like to know if someone is still using the gcov.php.net service. Is it still useful for anyone? I think test coverage, valgrind

Re: [PHP-DEV] is gcov.php.net still useful?

2011-07-19 Thread Christopher Jones
On 07/18/2011 02:47 PM, Nuno Lopes wrote: Hi, The gcov.php.net machine is about to die. Nexcess (the owner) already offered us the possibility to get a replacement. However, before accepting their offer I would like to know if someone is still using the gcov.php.net service. Is it still

[PHP-DEV] Subverting OpenSSL library function with Windows alternatives

2011-07-19 Thread Scott MacVicar
Just noticed a commit from Pierre last week http://svn.php.net/viewvc?view=revisionrevision=313112 which changed OpenSSL to use a special Windows API call for gathering random data. I've reverted this change so we can discuss this further. I disagree with advertising a library function and

Re: [PHP-DEV] Vote results

2011-07-19 Thread Ilia Alshanetsky
Stas, On the Remove magic quotes there seems to be an overwhelming support from PHP Core and the community for removing it. Any reason there is no definitive decision on the topic? On Sun, Jul 17, 2011 at 5:08 AM, Stas Malyshev smalys...@sugarcrm.com wrote: Hi! Here are the results of the

[PHP-DEV] Re: Subverting OpenSSL library function with Windows alternatives

2011-07-19 Thread Pierre Joye
Scott, On Wed, Jul 20, 2011 at 12:35 AM, Scott MacVicar sc...@macvicar.net wrote: Just noticed a commit from Pierre last week http://svn.php.net/viewvc?view=revisionrevision=313112 which changed OpenSSL to use a special Windows API call for gathering random data. I've reverted this

[PHP-DEV] Re: Subverting OpenSSL library function with Windows alternatives

2011-07-19 Thread Pierre Joye
and I will restore it myself right now, to be sure that it will be in the next releases. On Wed, Jul 20, 2011 at 12:54 AM, Pierre Joye pierre@gmail.com wrote: Scott, On Wed, Jul 20, 2011 at 12:35 AM, Scott MacVicar sc...@macvicar.net wrote: Just noticed a commit from Pierre last week

Re: [PHP-DEV] Vote results

2011-07-19 Thread Pierre Joye
On Wed, Jul 20, 2011 at 12:40 AM, Ilia Alshanetsky i...@prohost.org wrote: Stas, On the Remove magic quotes there seems to be an overwhelming support from PHP Core and the community for removing it. Any reason there is no definitive decision on the topic? No but some open questions, please

Re: [PHP-DEV] Vote results

2011-07-19 Thread Stas Malyshev
Hi! On 7/19/11 3:40 PM, Ilia Alshanetsky wrote: Stas, On the Remove magic quotes there seems to be an overwhelming support from PHP Core and the community for removing it. Any reason there is no definitive decision on the topic? I think there is, but I wanted to hear people that objected in

Re: [PHP-DEV] [PATCH] crypt_blowfish 1.2

2011-07-19 Thread Solar Designer
Hi, On Mon, Jul 18, 2011 at 11:27:32PM +0200, Pierre Joye wrote: Thanks for the patches, applied to all active branches. Thank you! About the tests, it would be very good to have them ported as phpt. As far as I remember I did that back then when I first ported it to php. No, your tests

[PHP-DEV] CRYPT_SHA256 fails tests in trunk

2011-07-19 Thread Solar Designer
Hi, These tests fail in trunk on my x86_64 build: crypt_sha256.phpt crypt_variation1.phpt The differences are like this: Expected: $5$saltstring$5B8vYYiY.CVt1RlTTf8KbXBH3hsxY/GNooZaBBGWEc5 Got $5$saltst$JTS/fkywz8NvjeCGmWDndJPi7ZrRFhQKBLNtQZWE2C3 That is, the salts are truncated.

[PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c

2011-07-19 Thread Scott MacVicar
Why did you even commit such a change without discussing it? I understand your logic for doing this but there was no RFC or discussion around the impact of this. OpenSSL has been FIPS certified, your change has changed this contract and it's calling back into a Windows API. Has it been

[PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c

2011-07-19 Thread Pierre Joye
hi, On Wed, Jul 20, 2011 at 1:50 AM, Scott MacVicar sc...@macvicar.net wrote: Why did you even commit such a change without discussing it? I maintain this part of the OpenSsl extension and the php windows port. There was a horrible bug and slowdown with this code and I fixed it. Users tested it

[PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c

2011-07-19 Thread Pierre Joye
On Wed, Jul 20, 2011 at 1:50 AM, Scott MacVicar sc...@macvicar.net wrote: OpenSSL has been FIPS certified, your change has changed this contract and it's calling back into a Windows API. Has it been reviewed for correctness? And by the way, the CryptoAPI for the windows versions we support is

[PHP-DEV] Code of conduct

2011-07-19 Thread Rasmus Lerdorf
It annoys me to no end that I even feel I need to write these down, but apparently I do. So, here are a couple of simple rules to guide your behaviour around here: 1. Do not call other developers nor users idiots nor other derogatory terms on the mailing list. 2. Do not use Twitter or other

Re: [PHP-DEV] PHP 5.4.0alpha2 released

2011-07-19 Thread Jingcheng Zhang
Hello, I'm using Windows XP Apache 2.2 build with VC9 x86 from Apache Lounge. 5.4.0alpha1 works, but 5.4.0alpha2 is broken with SideBySide error. Is there any difference in building environment between alpha1 and alpha2? Thanks very much. On Fri, Jul 15, 2011 at 1:43 AM, David Soria Parra

Re: [PHP-DEV] PHP 5.4.0alpha2 released

2011-07-19 Thread Christopher Jones
On 7/19/11 8:12 PM, Jingcheng Zhang wrote: Hello, I'm using Windows XP Apache 2.2 build with VC9 x86 from Apache Lounge. 5.4.0alpha1 works, but 5.4.0alpha2 is broken with SideBySide error. Is there any difference in building environment between alpha1 and alpha2? Thanks very much. Can you

Re: [PHP-DEV] Re: [PHP-CVS] svn: /php/php-src/ branches/PHP_5_4/ext/openssl/openssl.c trunk/ext/openssl/openssl.c

2011-07-19 Thread Chad Emrys
On 07/19/2011 07:09 PM, Pierre Joye wrote: On Wed, Jul 20, 2011 at 1:50 AM, Scott MacVicarsc...@macvicar.net wrote: OpenSSL has been FIPS certified, your change has changed this contract and it's calling back into a Windows API. Has it been reviewed for correctness? And by the way, the