Re: [RFC] Deprecate and remove /e modifier from preg_replace
| From: | Reindl Harald | Date: | Sun, 05 Feb 2012 16:50:32 +0000 |
| Subject: | Re: [RFC] Deprecate and remove /e modifier from preg_replace | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57734@lists.php.net to get a copy of this message | ||
Am 05.02.2012 17:45, schrieb Michael Stowe:
> Perhaps another option, if it's a security concern is the ability
> to turn off the /e modifier, and have it off by default. This way
> we can protect our less experienced programmers, while keeping it
> available for more advanced use cases.
>
> Just my two cents + inflation
+1 for secure/sane defaults!
it is possible with suhosin since years
suhosin.executor.disable_emodifier = Off
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc
Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc