RE: [PHP-DEV] Deprecate PHP's short open tags, again

From: Date: Wed, 14 Aug 2019 13:50:42 +0000
Subject: RE: [PHP-DEV] Deprecate PHP's short open tags, again
References: 1 2 3 4 5 6 7 8 9 10 11 12  Groups: php.internals 
Request: Send a blank email to internals+get-106603@lists.php.net to get a copy of this message
> Please, let's keep this discussion at some level of sanity... You basically need > stick to static HTML if you're considering possibility of such exec() usage as a > security issue. This discussion has gone out of sanity levels the moment people started to state that short tags is one (of the many) things PHP has why new programmers and companies don't pick the language or why colleagues laugh at you and is a blocker of new bright future etc. and now in this moment this is a do or die situation otherways next year everyone will be writing in javascript. > 1. exec-like functions have their purpose without any straight-forward alternative, while > <? is just worse version of > <?php. Except there are 4-5 functions which do the same not to mention `` backtick syntax (can't there be an accident mixing those with single quotes?). > <? $dbPasword = 'my$ecret' ?> is intended usage > of short open tags. On this I could also say that recommendations are to store all credentials outside webroot, but again it also qualify as something different than by accident generated code in IDE, just to show that the "security issue" can be stretched however you like. > You basically need stick to static HTML Maybe. But let's end at this .. rr

« previous php.internals (#106603) next »