[PHP-DEV] Request RFC karma

please and thank you https://github.com/php/php-src/pull/3918 -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php

[PHP-DEV] FFI class introduces non-standard method types (can be called statically and non-statically)

Hi there, I've been reading with interest about the new FFI class that has been introduced in PHP 7.4 [1]. However, I was surprised to see that the class includes bivalent methods, that is to say methods that can be called both statically and non-statically. For example, new() [2], which can be

[PHP-DEV] Re: commit 374f76998 causes getenv to be define with Xdebug loaded

For reference, and because it may be easier to debug than xdebug: https://github.com/nbs-system/snuffleupagus/issues/293 Cheers Joe On Thu, 13 Jun 2019 at 20:50, Dmitry Stogov wrote: > I'll try to check what was wrong with this commit and xdebug. > > > Thanks. Dmitry. >

[PHP-DEV] Re: commit 374f76998 causes getenv to be define with Xdebug loaded

I'll try to check what was wrong with this commit and xdebug. Thanks. Dmitry. From: Joe Watkins Sent: Wednesday, June 12, 2019 9:38:54 PM To: Derick Rethans Cc: Dmitry Stogov; PHP Developers Mailing List Subject: Re: commit 374f76998 causes getenv to be define

Re: [PHP-DEV] Re: [RFC][Vote] Covariant Returns and Contravariant Parameters

On Wed, May 8, 2019 at 6:51 PM Levi Morrison wrote: > On Wed, May 8, 2019 at 2:06 AM Nikita Popov wrote: > > > > On Tue, Jan 22, 2019 at 6:59 PM Levi Morrison wrote: > >> > >> On Tue, Jan 15, 2019 at 1:27 PM Christoph M. Becker > wrote: > >> > > >> > On 04.01.2019 at 20:17, Levi Morrison

Re: [PHP-DEV] The real world ...

On 13/06/2019 15:51, Rowan Collins wrote: In this case, you already did "wait until later" - you waited until the client saw it, and had the time and inclination to mention it to you. There are far better solutions out there, as others have mentioned, that make sure*you* see the message in good

Re: [PHP-DEV] The real world ...

On Thu, 13 Jun 2019 at 14:46, Lester Caine wrote: > Had I HIDDEN the warning the client would just have > ploughed on but now I can divert to fix the faulty bits of data and sort > the problem! It will be some silly thing missed, but in 20+ years of > code that are still a lot of those and

Re: [PHP-DEV] Proposal for a RFC

On Thu, Jun 13, 2019 at 4:23 PM Steven Wade wrote: > > I guess that's what it comes down to, what *specific* use cases would > this > > feature be intended to help with? Is there some code of your own that > > inspired you to propose it, or something you've seen publically that > would > >

[PHP-DEV] Re: Feedback on state of some PHP extensions, functions, etc.

On 12.06.2019 at 17:32, G. P. B. wrote: > I've been going through the documentation again to remove mentions of PHP 4 > and found some extensions, functions, etc. on which I'd like to know the > state of them and if it would be wise to deprecate them. > > I know I've thrown in some function

Re: [PHP-DEV] The real world ...

On Thu, Jun 13, 2019 at 9:36 AM Marco Pivetta wrote: > > You'd still see the DSN in the traces. > My understanding is that if using pdo.dsn.mysql via INI, you wouldn't see the username / password in traces. I only learned about this configuration reading through Sjon's PR, but looks reasonable.

Re: [PHP-DEV] Proposal for a RFC

Apologies for the super late response: > A recursive method would certainly have more value, because it actually > does something more than translate one syntax to another. On the other > hand, the use case that comes to mind is serialization, and we already have > more specific methods and

[PHP-DEV] Re: [RFC] [VOTE] Numeric Literal Separator

On Thu, May 30, 2019 at 7:50 AM Theodore Brown wrote: > Voting has now started on the Numeric Literal Separator RFC: > https://wiki.php.net/rfc/numeric_literal_separator > > This feature is widely supported in other languages, and can be very > helpful for improving code readability and

Re: [PHP-DEV] The real world ...

Am 13.06.19 um 15:30 schrieb Sjon Hortensius: > FWIW - hiding database passwords (when using PDO) would be possible when > https://github.com/php/php-src/pull/2684 gets included I was more thinking of a more general approach as PDO is not the only place where passwords are transfered. So having

Re: [PHP-DEV] The real world ...

On 13/06/2019 13:30, Andrey Andreev wrote: What I meant is, all a user needs to report to you is that there was a problem, and since you have logs you can lookup whatever it was (possibly asking just for a timestamp and/or IP address to pinpoint the visitor). JUST had a report of a problem ...

Re: [PHP-DEV] The real world ...

As literally explained in the PR - dsns are already hidden from userspace. See https://github.com/php/php-src/pull/2684#issuecomment-32567 Cheers, Sjon On Thu, Jun 13, 2019 at 3:36 PM Marco Pivetta wrote: > On Thu, Jun 13, 2019 at 3:30 PM Sjon Hortensius > wrote: > >> FWIW - hiding

Re: [PHP-DEV] The real world ...

On Thu, Jun 13, 2019 at 3:30 PM Sjon Hortensius wrote: > FWIW - hiding database passwords (when using PDO) would be possible when > https://github.com/php/php-src/pull/2684 gets included > > Cheers, > Sjon > You'd still see the DSN in the traces. Marco Pivetta http://twitter.com/Ocramius

Re: [PHP-DEV] The real world ...

FWIW - hiding database passwords (when using PDO) would be possible when https://github.com/php/php-src/pull/2684 gets included Cheers, Sjon On Thu, Jun 13, 2019 at 9:56 AM Andreas Heigl wrote: > Hey All > > Am 13.06.19 um 09:41 schrieb Nikita Popov: > > On Thu, Jun 13, 2019 at 9:35 AM Lester

Re: [PHP-DEV] The real world ...

Le 13/06/2019 14:20, Lester Caine a écrit : On 13/06/2019 13:04, Andrey Andreev wrote: You have logs to see the errors; relying on your users to report the actual error messages to you is the worst way to do it. How many website logs can you manage on a daily basis? Given the volume of

Re: [PHP-DEV] The real world ...

Hi, On Thu, Jun 13, 2019 at 3:21 PM Lester Caine wrote: > > On 13/06/2019 13:04, Andrey Andreev wrote: > > You have logs to see the errors; relying on your users to report the > > actual error messages to you is the worst way to do it. > > How many website logs can you manage on a daily basis?

Re: [PHP-DEV] The real world ...

On 13/06/2019 13:04, Andrey Andreev wrote: You have logs to see the errors; relying on your users to report the actual error messages to you is the worst way to do it. How many website logs can you manage on a daily basis? Given the volume of material in heavily used website. I am STILL

Re: [PHP-DEV] The real world ...

If you're so keen on providing the user something to see without having to use display_errors=on: Have you had a look at https://php.net/register_shutdown_function ? You can always use that to figure out whether there was a fatal error and then display something nice to the user. No leaked

Re: [PHP-DEV] The real world ...

Hi, I too am in favor of a mechanism to strip out sensitive data from error messages. But Lester, man, you have it all backwards ... On Thu, Jun 13, 2019 at 11:37 AM Lester Caine wrote: > > On 13/06/2019 08:55, Andreas Heigl wrote: > >> display_errors=Off in production. > > Which give a white

[PHP-DEV] PHP 7.4.0alpha1 is available for testing

PHP 7.4.0alpha1 has just been released and can be downloaded from: Or use the git tag: php-7.4.0alpha1 Windows binaries are available at: Please test it carefully, and report any bugs in the bug system. 7.4.0alpha2 should

Re: [PHP-DEV] The real world ...

Hey Lester, hey All Am 13.06.19 um 10:36 schrieb Lester Caine: > On 13/06/2019 08:55, Andreas Heigl wrote: >>> display_errors=Off in production. > > Which give a white screen ... fine for security but useless for people > using the site! > >> While that makes absolute sense perhaps thinking

[PHP-DEV] PHP 7.3.7RC1 is available for testing

PHP 7.3.7RC1 has just been released and can be downloaded from: Or use the git tag: php-7.3.7RC1 Windows binaries are available at: Please test it carefully, and report any bugs in the bug system. 7.3.7 should be expected in 2

Re: [PHP-DEV] The real world ...

On Thu, Jun 13, 2019, 10:36 Lester Caine wrote: > On 13/06/2019 08:55, Andreas Heigl wrote: > >> display_errors=Off in production. > > Which give a white screen ... fine for security but useless for people > using the site! > Error logging is how this is to be approached. Personally I STILL

[PHP-DEV] PHP version 7.2.20RC1 is available for testing

Hi, PHP 7.2.20 RC1 was just released and can be downloaded from: https://downloads.php.net/~remi/ Or using the git tag: php-7.2.20RC1 The Windows binaries are available at: http://windows.php.net/qa/ Please test it carefully, and report any bugs in the bug system. 7.2.20 should be

Re: [PHP-DEV] The real world ...

On 13/06/2019 08:55, Andreas Heigl wrote: display_errors=Off in production. Which give a white screen ... fine for security but useless for people using the site! While that makes absolute sense perhaps thinking whether there is a way to mark password-parameters in core-functions and hide

Re: [PHP-DEV] The real world ...

Hey All Am 13.06.19 um 09:41 schrieb Nikita Popov: > On Thu, Jun 13, 2019 at 9:35 AM Lester Caine wrote: > >> Seen in the wild ... company name sanitised >> >> Warning: mysqli::mysqli(): (HY000/2002): No such file or directory in >> /home/888/public_html/system/library/db/mysqli.php on line 7

Re: [PHP-DEV] The real world ...

On Thu, Jun 13, 2019 at 9:35 AM Lester Caine wrote: > Seen in the wild ... company name sanitised > > Warning: mysqli::mysqli(): (HY000/2002): No such file or directory in > /home/888/public_html/system/library/db/mysqli.php on line 7 > > Fatal error: Uncaught exception 'Exception' with message

[PHP-DEV] The real world ...

Seen in the wild ... company name sanitised Warning: mysqli::mysqli(): (HY000/2002): No such file or directory in /home/888/public_html/system/library/db/mysqli.php on line 7 Fatal error: Uncaught exception 'Exception' with message 'Error: />Error No: ' in