set the PHP_INI_ENTRY_* values the same as for php.ini-production

From: Date: Sat, 23 Jul 2011 22:29:37 +0000
Subject: set the PHP_INI_ENTRY_* values the same as for php.ini-production
Groups: php.internals 
Request: Send a blank email to internals+get-54171@lists.php.net to get a copy of this message
hi. We had a discussion about the magic_quotes removal that it is weird that even though that mq was deprecated in 5.3, we still have/had that enabled by default (if you didn't set it from the command line or through a php.ini, the default value which is set from the source by the PHP_INI_ENTRY_* macros). I would propose that the defaul values(PHP_INI_ENTRY_*) and the php.ini-production should be keep in sync as much as possible. for one thing, this would be less confusing (what do we mean by default? PHP_INI_ENTRY_* or the php.ini? why are they different? etc.), the second thing would be the principle of the fail-secure principle: usually the production settings are more secure and less verbose(display_errors for example). what do you think? of course, if this keeps traction, a proper RFC would be needed, but for now, I'm just throwing ideas. -- Ferenc Kovács @Tyr43l - http://tyrael.hu

« previous php.internals (#54171) next »