Re: Deprecate PHP's short open tags, again
| From: | Robert Korulczyk | Date: | Wed, 14 Aug 2019 14:49:55 +0000 |
| Subject: | Re: Deprecate PHP's short open tags, again | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-106604@lists.php.net to get a copy of this message | ||
> This discussion has gone out of sanity levels the moment people started to state that short
> tags is one (of the many)
> things PHP has why new programmers and companies don't pick the language or why colleagues
> laugh at you and is a
> blocker of new bright future etc. and now in this moment this is a do or die situation
> otherways next year everyone
> will be writing in javascript.
No one said that (except you).
But current reaction for this RFC could be depressing. I'm using PHP for quite a long time and
I really hoped that someday we'll be able to get rid of
all (or at least the most of them) the traps and annoying little things from the old days. That
doesn't sound realistic anymore...
> Except there are 4-5 functions which do the same not to mention `` backtick syntax (can't
> there be an accident mixing those with single quotes?).
I was talking about all these functions that allows to execute shell commands. What is the point of
disabling only one of them? I thought that the
problem is in functionality, not in the name :P
>>
<? $dbPasword = 'my$ecret' ?> is intended
>> usage of short open tags.
>
> On this I could also say that recommendations are to store all credentials outside webroot,
I'm afraid you don't understand the problem. Having such code outside of webroot does not
help you much if this file will be included from another
file (which uses <?php, so it will work as expected). And exposing DB password is
just the simplest example - single non-working if can lead to a
wide range of bugs with serious consequences, far beyond code leak.
Regards,
Robert Korulczyk