Re: RFC for new INI's

From: Date: Tue, 10 Feb 2009 20:59:09 +0000
Subject: Re: RFC for new INI's
References: 1 2  Groups: php.internals 
Request: Send a blank email to internals+get-42990@lists.php.net to get a copy of this message
Hi, Some suggestions: Links: Instead of forcing language to english, allow autodetection from http headers. Before: http://www.php.net/manual/en/ini.core.php#ini.user-dir After: http://www.php.net/ini.core#ini.user-dir Also some things I think are not appropriate: extension_dir = "./" enable_dl = On Setting extension_dir to this value allows an attacker to execute code using dl(). I believe at least enable_dl should be disabled on production systems. Regarding register_argc_argv, you write: ; Development Value: On ; Production Value: Off However it's off in both case (which seems better to me anyway). Just a matter of fixing comments? For now that's everything that I saw, I'll take another look later :) Mark Le mardi 10 février 2009 à 08:17 -0800, Christopher Jones a écrit : > > Eric Stewart wrote: > > A new RFC for PHP's proposed INI files have been added to the wiki. Below is > > a direct link to the page. > > http://wiki.php.net/rfc/newinis > > > > Eric Lee Stewart > > ericleestewart@gmail.com > > > > Eric, > > Thanks for the work put into this. My comments follow. > > Chris > > --------- > > The section on devel & prod setting differences looks nice but it does > become a maintenance task. Since diffing files is easy (and > relatively obvious), I'd suggest removing this section from the files. > You may want to keep it in the RFC text so reviewers can get a quick > idea of the intent of the differences. It's also not immediately > obvious from this section whether the given values are the defaults, > or what is set in each file, or set in the other file. > > In the section on extensions. IIRC, you can now use absolute paths. > > Change all "http://us2.php.net/manual/en/" to > "http://www.php.net/manual/" > (Maybe the doc team can confirm whether to keep the "en") > > oci8.events and oci8.old_oci_close_semantics are boolean, so we can > take this opportunity to change the 1 and 0 to On and Off. > > > -- > Email: christopher.jones@oracle.com Tel: +1 650 506 8630 > Twitter: http://twitter.com/ghrd Free PHP Book: > http://tinyurl.com/UGPOM >

« previous php.internals (#42990) next »