Req #77378 [Com]: Default to short_open_tags = false

Edit report at https://bugs.php.net/bug.php?id=77378&edit=1 ID: 77378 Comment by: spam2 at rhsoft dot net Reported by: olafvdspek at gmail dot com Summary: Default to short_open_tags = false Status: Open Type: Feature/Change Request Package: *General Issues PHP Version: 7.3.0 Block user comment: N Private report: N New Comment: in which world is when "you change the default" the same as "That's already the case with the php.ini change"? Previous Comments: ------------------------------------------------------------------------ [2018-12-31 02:13:35] olafvdspek at gmail dot com > there are two things: http://php.net/manual/en/ini.core.php#ini.short-open-tag doesn't mention any of this. > when you change that default on any existing environment you probably leak code and credentials > without taking notice That's already the case with the php.ini change. ------------------------------------------------------------------------ [2018-12-30 19:00:57] spam2 at rhsoft dot net there are two things: * it's recommended for years to tun it off * turning it off has security risks when you change that default on any existing environment you probably leak code and credentials without taking notice if you care your "php.ini" would have it disabled for years and if you don#t care changing the default only introduces problems with no gain ------------------------------------------------------------------------ [2018-12-30 18:55:39] olafvdspek at gmail dot com Description: ------------ AFAIK the recommendation has been false for quite some time but the default (and docs) don't reflect this. Could this inconsistency be rectified? http://php.net/manual/en/ini.core.php#ini.short-open-tag https://github.com/oerdnj/deb.sury.org/issues/1043 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=77378&edit=1