Re: [RFC] Deprecate and remove /e modifier from preg_replace
| From: | Pierre Joye | Date: | Sun, 05 Feb 2012 17:22:53 +0000 |
| Subject: | Re: [RFC] Deprecate and remove /e modifier from preg_replace | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57739@lists.php.net to get a copy of this message | ||
hi,
On Sun, Feb 5, 2012 at 5:45 PM, Michael Stowe <mikegstowe@gmail.com> wrote:
> Perhaps another option, if it's a security concern is the ability to turn off the /e
> modifier, and have it off by default. This way we can protect our less experienced programmers,
> while keeping it available for more advanced use cases.
That sounds like a nicer approach and it is actually one of the RFC I
like to see to bring some of the features of Suhosin in PHP (disable
eval and the e modifier).
Cheers,
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org