Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 16:38 21/3/2001, Thies C. Arntzen wrote: > i fully agree to sascha. plus i see no real reason to include > a new module once we are in "release-process". new modules > are by default not "producition-stable" so why hurry to > include them in a "official-release"? For wide expos

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 22:19 21/3/2001, Jason Greene wrote: >If the exception policy was in place here are some questions of thought: >What would be necessary to make it safe to php in a whole? I'd say that a module that has no effect on building PHP is fine to add as an experimental module. The only reason I beli

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

t;I honestly agree with both positions on this one, and I think good can >come from both of them : ) > >-Jason > > > > >- Original Message - >From: "Zeev Suraski" <[EMAIL PROTECTED]> >To: "Sascha Schumann" <[EMAIL PROTECTED]> >

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

quot;PHP Developers Mailing List" <[EMAIL PROTECTED]>; "PHP Quality Assurance Team Mailing List" <[EMAIL PROTECTED]> Sent: Wednesday, March 21, 2001 1:33 PM Subject: Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi > But I

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 21:25 21/3/2001, Sascha Schumann wrote: >On Wed, 21 Mar 2001, Andi Gutmans wrote: > > > Why do we need to have an interrogation. Relax, it's not such a big deal. > > I'm completely relaxed. I just dislike twisting history. Sascha, As Cynic said, it's really a good idea to stop the flame

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

But I referred to 4.0.3pl1 :) At 21:23 21/3/2001, Sascha Schumann wrote: > > The Apache module issue was a security problem. A fairly major one, too. > > Yes, that is why I mentioned 4.0.4pl1 as an exception in an > earlier email. > > - Sascha Expe

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Wed, 21 Mar 2001, Andi Gutmans wrote: > Why do we need to have an interrogation. Relax, it's not such a big deal. I'm completely relaxed. I just dislike twisting history. - Sascha Experience IRCG http://schumann.cx/http://sch

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> The Apache module issue was a security problem. A fairly major one, too. Yes, that is why I mentioned 4.0.4pl1 as an exception in an earlier email. - Sascha Experience IRCG http://schumann.cx/http://schumann.cx/ircg -- P

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

Hi Andi! At 19:58 21.3. 2001, Andi Gutmans wrote the following: -- >Why do we need to have an interrogation. Relax, it's not such a big deal. We don't. I hope no one will take my remarks personally. :) >4.0.4pl1 & 4.0.3pl1 both had se

Re: [PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 20:50 21/3/2001, Sascha Schumann wrote: >On Wed, 21 Mar 2001, Andi Gutmans wrote: > > > A couple of these were buffer overflows IIRC which were security issues. > > Remember the group@ emails about those? > > Fixes against format-string attacks and for file-upload > issues went into 4.0

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

Why do we need to have an interrogation. Relax, it's not such a big deal. 4.0.4pl1 & 4.0.3pl1 both had security fixes (Apache config handling was a security issue). Anyway, I still don't understand what the big fuss is about. Let's stop arguing about this like 4th graders. By the way, the erro

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Wed, 21 Mar 2001, Andi Gutmans wrote: > A couple of these were buffer overflows IIRC which were security issues. > Remember the group@ emails about those? Fixes against format-string attacks and for file-upload issues went into 4.0.3. Or what are you referring to? - Sascha

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

A couple of these were buffer overflows IIRC which were security issues. Remember the group@ emails about those? Andi At 07:17 PM 3/21/2001 +0100, Sascha Schumann wrote: > > I think most (probably not all) pl's were sparked due to security bugs > > which were found and we took the opportunity to

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> I think most (probably not all) pl's were sparked due to security bugs > which were found and we took the opportunity to add another couple of > important fixes. Those kind of pl's would not have been prevented by any > Great Plan. If I remember correctly, 4.0.4pl1 was the only release

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 05:03 PM 3/21/2001 +0100, Sascha Schumann wrote: > > The bottom line is that, as I said, the trick in good opensource software > > is taking calculated risks, and mixing agility with quality assurance. One > > can look through your binary glasses, and then it's either complete lack of > > qual

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

In an attempt to fulfill Cynic's request, I'll only say that this whole thread began when I suggested that the release-process is modified to reflect that adding new modules is allowed. Zeev At 18:03 21/3/2001, Sascha Schumann wrote: > > The bottom line is that, as I said, the trick in good op

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 17:15 21/3/2001, Sascha Schumann wrote: > > I definitely don't agree with this definitely. A good thing about > > opensource projects is that there aren't committees and thick rule books > > that move and act at the speed of a dinosaur. When it begins to look that > > way, you know you're in

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> The bottom line is that, as I said, the trick in good opensource software > is taking calculated risks, and mixing agility with quality assurance. One > can look through your binary glasses, and then it's either complete lack of > quality, or complete lack of risks, and one can look with reason

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> I definitely don't agree with this definitely. A good thing about > opensource projects is that there aren't committees and thick rule books > that move and act at the speed of a dinosaur. When it begins to look that > way, you know you're in the wrong direction. OpenSource does not mean

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 16:44 21/3/2001, Hartmut Holzgraefe wrote: >Sascha Schumann wrote: > > Guys, please play by the rules which are laid down in > > RELEASE_PROCESS. Further decreasing the quality of PHP > > releases doesn't help anyone and just makes us look bad. > >yes, that's it, let's play by the

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

Sascha Schumann wrote: > Guys, please play by the rules which are laid down in > RELEASE_PROCESS. Further decreasing the quality of PHP > releases doesn't help anyone and just makes us look bad. yes, that's it, let's play by the rules during a RC cycle or don't have rules at all ru

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Wed, Mar 21, 2001 at 03:30:58PM +0100, Sascha Schumann wrote: > > Guys, please play by the rules which are laid down in > RELEASE_PROCESS. Further decreasing the quality of PHP > releases doesn't help anyone and just makes us look bad. i fully agree to sascha. plus i see no r

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> As you may know, new scripts don't tend to be born with nuclear simulations > as their config.m4, as the gd extension grew to have during the years. "don't tend" does not preclude the existance of such modules in the future. Guys, please play by the rules which are laid down in

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 16:20 21/3/2001, Sascha Schumann wrote: > > I don't think that there would be a real life situation in which a new > > module would break a build under one platform, and won't under another > > platform, without you actually using the module. The author has to be > > exceptionally 'talented' t

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> I don't think that there would be a real life situation in which a new > module would break a build under one platform, and won't under another > platform, without you actually using the module. The author has to be > exceptionally 'talented' to achieve that. The config.m4 just has to reac

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 15:50 21/3/2001, Sascha Schumann wrote: > > Yes, it is. Non trivial things are things that are difficult to find, > > which require long and thorough testing, such as changes to core API > > functions or very common modules. Figuring whether the build works or not > > is trivial. > > That

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> Yes, it is. Non trivial things are things that are difficult to find, > which require long and thorough testing, such as changes to core API > functions or very common modules. Figuring whether the build works or not > is trivial. That might be true for a single build. We support dozens

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

No disrespect for the config.m4, it's not all that important if it's optimized or not :) At 13:09 21/3/2001, Ben Mansell wrote: >On Tue, 20 Mar 2001, Jani Taskinen wrote: > > > On Tue, 20 Mar 2001, Andi Gutmans wrote: > > > > >At 08:32 PM 3/20/2001 +0100, Derick Rethans wrote: > > >>On Tue, 20 M

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 13:10 21/3/2001, Sascha Schumann wrote: > > In my humble opinion (humility is a virtue), new modules are fine to add > > while in the release process, as long as there's at least one RC after > > them, to ensure they don't mess up the build or anything trivial like > > that. > > Oh, messing

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> In my humble opinion (humility is a virtue), new modules are fine to add > while in the release process, as long as there's at least one RC after > them, to ensure they don't mess up the build or anything trivial like > that. Oh, messing up the build is a trivial thing? > It takes 2-3 mont

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Tue, 20 Mar 2001, Jani Taskinen wrote: > On Tue, 20 Mar 2001, Andi Gutmans wrote: > > >At 08:32 PM 3/20/2001 +0100, Derick Rethans wrote: > >>On Tue, 20 Mar 2001, Andi Gutmans wrote: > >> > >> > andi Tue Mar 20 10:13:21 2001 EDT > >> > > >> > Added files: (Branch: PH

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Tue, 20 Mar 2001, Zeev Suraski wrote: >his new code. In my opinion, the CVS rules should be changed to reflect >that, just to make Jani happy, or we'd stay outlaws in his mind forever :) :) --Jani -- PHP Development Mailing List To unsubscribe, e-mail: [EMAIL PROTEC

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5)/sapi/fastcgi

Well, IIUC, this is really all Jani is trying to say...RC2 is could be considered invalid now... On Tue, 20 Mar 2001, Zeev Suraski wrote the following to Sascha Schumann : > In my humble opinion (humility is a virtue), new modules are fine to add > while in the release process, as long as there

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

> The SAPI extension was never used by anyone before so there's no harm in > adding it (this is not changing/patching existing functionality). > It does make two changes to two build files but I took a very close look at > them and it doesn't seem like they can cause us problems. Regardless o

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

It's an inherent 'feature' of opensource projects, which has its advantages and disadvantages. One of the good things about OSS is the relatively short 'time to market'. The price is that you have to be willing to accept buglets. The trick is to find the right mixture between time to market

[PHP-DEV] Re: [PHP-QA] Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 20:57 20/3/2001, Jani Taskinen wrote: >On Tue, 20 Mar 2001, Andi Gutmans wrote: > > >I couldn't find any indication that this can break any of the other sapi > >builds so I don't think there's a problem with adding it. > >Okay. But still I find it very annoying that we don't follow the >rules w

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 07:57 PM 3/20/2001 +0100, Jani Taskinen wrote: >On Tue, 20 Mar 2001, Andi Gutmans wrote: > > >I couldn't find any indication that this can break any of the other sapi > >builds so I don't think there's a problem with adding it. > >Okay. But still I find it very annoying that we don't follow the

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Tue, 20 Mar 2001, Andi Gutmans wrote: >I couldn't find any indication that this can break any of the other sapi >builds so I don't think there's a problem with adding it. Okay. But still I find it very annoying that we don't follow the rules we have created. Just for the record. :) And I hop

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 07:41 PM 3/20/2001 +0100, Jani Taskinen wrote: >On Tue, 20 Mar 2001, Andi Gutmans wrote: > > >At 08:32 PM 3/20/2001 +0100, Derick Rethans wrote: > >>On Tue, 20 Mar 2001, Andi Gutmans wrote: > >> > >> > andi Tue Mar 20 10:13:21 2001 EDT > >> > > >> > Added files: (Bran

Re: [PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Tue, 20 Mar 2001, Andi Gutmans wrote: >At 08:32 PM 3/20/2001 +0100, Derick Rethans wrote: >>On Tue, 20 Mar 2001, Andi Gutmans wrote: >> >> > andi Tue Mar 20 10:13:21 2001 EDT >> > >> > Added files: (Branch: PHP_4_0_5) >> > /php4/sapi/fastcgiCREDITS Makefi

[PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

At 08:32 PM 3/20/2001 +0100, Derick Rethans wrote: >On Tue, 20 Mar 2001, Andi Gutmans wrote: > > > andi Tue Mar 20 10:13:21 2001 EDT > > > > Added files: (Branch: PHP_4_0_5) > > /php4/sapi/fastcgiCREDITS Makefile.in README.FastCGI config.m4 > >

[PHP-DEV] Re: [PHP-CVS] cvs: php4(PHP_4_0_5) /sapi/fastcgi

On Tue, 20 Mar 2001, Andi Gutmans wrote: > andi Tue Mar 20 10:13:21 2001 EDT > > Added files: (Branch: PHP_4_0_5) > /php4/sapi/fastcgiCREDITS Makefile.in README.FastCGI config.m4 > fastcgi.c php.sym php_fastcgi.h > Log: > -