Re: [RFC] Deprecations for PHP 8.5
| From: | Rowan Tommins [IMSoP] | Date: | Fri, 04 Jul 2025 17:20:37 +0000 |
| Subject: | Re: [RFC] Deprecations for PHP 8.5 | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-127880@lists.php.net to get a copy of this message | ||
On 3 July 2025 17:04:59 BST, Derick Rethans <derick@php.net> wrote:
>The intention behind the filter extension was that admins can set a
>default filter for *all* data coming in through this
>
filter.default
>setting as a "safe" fallback. That could/should probably even be a
>filter that just makes all data "☺" for example, to indicate you're
>working with unsanitised data. (I don't think there is such a filter
>though).
Perhaps the option should be something like "filter.mandatory=1", blanking or poisoning
the superglobals and obliging users to go through filter_var?
Rowan Tommins
[IMSoP]