Re: proposal for change the argument of parse_str/mb_parse_str

From: Date: Sun, 11 Sep 2011 08:15:07 +0000
Subject: Re: proposal for change the argument of parse_str/mb_parse_str
References: 1  Groups: php.internals 
Request: Send a blank email to internals+get-55361@lists.php.net to get a copy of this message
Am 11.09.2011 06:31, schrieb Rui Hirokawa: > Hello, > > I think the second argument of parse_str/mb_parse_str > should be changed from optional to mandatory. > parse_str(string encoded_string [, array result]) > -> parse_str(string encoded_string , array result) no because there is no reason and all what will happen is parse_str($a, $b); extract($b); so please leave us in peace with the need to add the second line > It is to reduce the risk of vulnerability, and it has neary same risk > as register_globals which is removed from PHP 5.4 it has not, inside a function this is absolutely safe and if you are writing spaghetti-code nothing can help you

Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
« previous php.internals (#55361) next »