Re: Comments on PHP security

Hello Andi, On 1/11/07, Andi Gutmans <andi@zend.com> wrote:

Do we need to provide better tools for our developers? Definitely! This is why we are working on ext/filter (I agree the first pass wasn't very successful), a filter extension in Zend Framework, and other best practices.

What do you mean? Having bugs in the first release is a sign of failure? Or the complete lack of feedbacks before 5.2.0 was the cause? I would love to hear your opinion on what we made wrong. I really dislike to read that here and now, given the huge amount of calls for feedbacks/tests I made before 5.2.0-final. One solution to solve this problem is to release more often through PECL (it works for zip and my other extensions). About the Zend Framework, what does it have to do with PHP internal choices? In my opinion nothing, or not more/less than any other frameworks or application out there. If ext/filter needs to be improved to fit your needs, please tell us. --Pierre