Re: About dropping magic_quotes in 5.3 (was: Re: [PHP-DEV] Re: PHP 5.2.7 + magic_quotes_gpc broken)

From: Date: Mon, 08 Dec 2008 16:53:20 +0000
Subject: Re: About dropping magic_quotes in 5.3 (was: Re: [PHP-DEV] Re: PHP 5.2.7 + magic_quotes_gpc broken)
References: 1 2 3 4  Groups: php.internals 
Request: Send a blank email to internals+get-42166@lists.php.net to get a copy of this message
On 8 Dec 2008, at 16:35, Philip Olson <philip@roshambo.org> wrote:
On 8 Dec 2008, at 08:18, Hannes Magnusson wrote:
On Mon, Dec 8, 2008 at 16:57, Pierre Joye <pierre.php@gmail.com> wrote:
On Mon, Dec 8, 2008 at 4:47 PM, Johannes Schlüter <johannes@php.net> wrote:
When dropping magic_quotes the hosting company can do one of two things: a) not update to 5.3 so we either have to maintain 5.2 for some time or let them have problems
+1
We cannot simply nuke a feature that was once upon a time sold as a security feature, and is still enabled by default, just "out of the blue".
Agreed, going from on by default to removed just feels odd.
I'd disable it by default in 5.3 and lets start throwing a strict error if the configuration enables it. Scott

« previous php.internals (#42166) next »