Re: [PHP-DEV] PHP deserialization techniques offer rich pickings for security researchers

2019-04-14 Thread Raymond Irving
Hi, Thanks for responding to this issue. Will calling getMetaData still parse and execute malicious code? ;__ Raymond On Sun, 14 Apr 2019, 4:47 PM Stanislav Malyshev, wrote: > Hi! > > > I came across this article which highlights a few issues with PHP > > deserialization techniques: > >

[PHP-DEV] PHP deserialization techniques offer rich pickings for security researchers

2019-04-14 Thread Raymond Irving
Hello Team, I came across this article which highlights a few issues with PHP deserialization techniques: https://portswigger.net/daily-swig/phar-out-php-deserialization-techniques-offer-rich-pickings-for-security-researchers

[PHP-DEV] Object Type Casting

2013-04-24 Thread Raymond Irving
Hello, Are there any plans to add object type casting support in PHP? For example: $circle = (Circle) ShapeFactory::createShape('circle'); $circle-radius = 10; echo $circle-getArea(); It would be great if this feature could be added to 5.5 :) __ Raymond Irving

Re: [PHP-DEV] Include XDebug and Suhosin Patch in Core for 5.5

2013-03-01 Thread Raymond Irving
I agree with adding XDebug to core distribution but it must be disabled by default. On Fri, Mar 1, 2013 at 8:28 AM, Julien Pauli jpa...@php.net wrote: On Fri, Mar 1, 2013 at 12:49 PM, Kalle Sommer Nielsen ka...@php.net wrote: Hi 2013/3/1 Julien Pauli jpa...@php.net: I guess the

Re: [PHP-DEV] [VOTE] Integrating Zend Optimizer+ into the PHP distribution

2013-02-28 Thread Raymond Irving
I'm very sure users will not complain if 5.5 is delayed for a few months. Most websites will not be installing 5.5 immediately after it has been released. My take on this is that we integrate O+ in to core, iron out all the issues and then release a stable 5.5. If O+ will improve the

[PHP-DEV] Getting separate outputs with Date Functions

2013-02-18 Thread Raymond Irving
Hello, I'm getting two different values when I use a timestamp with the date_create() and date() functions: echo date_create('@1361240634')-format('Y-m-d'); // output: 2013-02-19 echo date('Y-m-d',1361240634); // output: 2013-02-18 Is this a known issue? My timezone setting is set to

[PHP-DEV] The built-in PHP web server is very cool!

2012-12-19 Thread Raymond Irving
Hello, I would like to thank you guys very much for adding the built-in PHP web server to PHP. For the first time I've just deployed a quick standalone app without having to go through the trouble of configuring IIS or any other web server. The installation was easy as ABC. The built-in server

Re: [PHP-DEV] The built-in PHP web server is very cool!

2012-12-19 Thread Raymond Irving
Hi William, Why not? On Wed, Dec 19, 2012 at 11:07 AM, William Betts william.be...@gmail.comwrote: On Wed, Dec 19, 2012 at 10:05 AM, Raymond Irving xwis...@gmail.com wrote: Hello, I would like to thank you guys very much for adding the built-in PHP web server to PHP. For the first

Re: [PHP-DEV] The built-in PHP web server is very cool!

2012-12-19 Thread Raymond Irving
not be a problem. No other user will be able to access the application from the network. These are basically single user web-desktop applications. On Wed, Dec 19, 2012 at 12:33 PM, Patrick ALLAERT patrickalla...@php.netwrote: 2012/12/19 Raymond Irving xwis...@gmail.com: Hi William, Why

Re: [PHP-DEV] HHVM and PHP

2012-11-30 Thread Raymond Irving
Many thanks for the feedback. I would love see some JIT features added to the core as this would help to improve the overall performance. Sara, I like your extension idea as this would not require any changes to the core. Here's another idea: --- 1. Modify PHP

Re: [PHP-DEV] Recycle PHP Log

2012-10-30 Thread Raymond Irving
Most of these utilities require admin user access to the server. For example, Logrotate is normally run as a daily cron job There are a lot of shared services that will not allow users to install or run certain jobs. How difficult will if be to add this feature to PHP? Will it require major

Re: [PHP-DEV] Session Id Collisions

2012-08-23 Thread Raymond Irving
09:48 PM, Raymond Irving wrote: Hello Everyone, I've been reading that it's possible to encounter session id collisions with the default php configuration. It's also been said that PHP utilizes a cryptographically weak random number generator to produce session ID information. I

[PHP-DEV] Session Id Collisions

2012-08-22 Thread Raymond Irving
Hello Everyone, I've been reading that it's possible to encounter session id collisions with the default php configuration. It's also been said that PHP utilizes a cryptographically weak random number generator to produce session ID information. I know it's possible to change the hash function

Re: [PHP-DEV] PHP Performance - 1’000’000 iterations

2012-08-19 Thread Raymond Irving
Many thanks for the feedback. __ Raymond On Sun, Aug 19, 2012 at 10:02 AM, Rasmus Lerdorf ras...@lerdorf.com wrote: On 08/19/2012 10:29 AM, Raymond Irving wrote: Hello, What could have cause PHP to start out so great but then slows to a crawl? Could it be the GC? Number

Re: [PHP-DEV] [off] PHP: a fractal of bad design

2012-05-07 Thread Raymond Irving
I was very surprised when I came across the == issue sometime ago. IMO strings should be compared as strings. They should never be converted to integer. 1==1 // always convert the number value to a string and then compare it foo == 0// should return false 123abc == 123nth //

[PHP-DEV] Scalar Type Hinting

2012-03-05 Thread Raymond Irving
Hello, I came across some info on the web that states that scalar type hinting was added to the PHP trunk but it did not make it's way into 5.4 because of objections from the community. Will it ever make it's way into 5.5? I know PHP is considered to be a weak typed language but it should also

[PHP-DEV] TameJS syntax for Async/Parallel execution in PHP

2011-08-04 Thread Raymond Irving
Hello, I came across this little library called TameJS (http://tamejs.org/) and fell in love with the it's syntax. This had me thinking if it was possible to add such features to a PHP CLI (or web app): ?php await { // wait until all calls within this block is mysql_query_async($sql, $args,