Re: [RFC] Deprecate the extract function in PHP 7.3

From: Date: Sat, 16 Sep 2017 12:37:36 +0000
Subject: Re: [RFC] Deprecate the extract function in PHP 7.3
References: 1 2 3 4  Groups: php.internals 
Request: Send a blank email to internals+get-100675@lists.php.net to get a copy of this message
Am 16.09.2017 um 13:48 schrieb Marco Pivetta:
"then don't use it" worked great for register_globals and magic_quotes. Not saying it is the same here, but you really ought to have a bit of a mentality adjustment
so when it is not the same why do you mention it? there is a difference between a config option which can change on each and every machine at every point in time and completly and then completly change behavior or a explicit function call what is the next step in your logic? remove foreach() because one could do foreach($_REQUEST as $key=>$var) to emulate extract() after you took it away? PHP is a programming language and not a office software - it depends on the usecase and source of data to qualify a operation as safe and it's completly the responsibility of the programmer using a programming language, not yours

« previous php.internals (#100675) next »