Re: [VOTE] Change crypt() behavior w/o salt
| From: | William Bartlett | Date: | Tue, 24 Sep 2013 14:13:30 +0000 |
| Subject: | Re: [VOTE] Change crypt() behavior w/o salt | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-69316@lists.php.net to get a copy of this message | ||
I think BC (like requiring salt) are unnecessary given that password_*
functions already exist with salt enabled by default.
But an E_NOTICE isn't a bad idea.
--
William Bartlett
College of Engineering | Cornell University '14
240-432-5189
On Mon, Sep 23, 2013 at 10:47 PM, Pierre Joye <pierre.php@gmail.com> wrote:
> On Sep 23, 2013 6:42 PM, "Yasuo Ohgaki" <yohgaki@ohgaki.net> wrote:
> >
> > Hi all,
> >
> > It's been a whole from the discussion.
> > I setup vote for RFC: Change crypt() behavior w/o salt.
> >
> > https://wiki.php.net/rfc/crypt_function_salt
> >
> > If I missed something, please let me know.
>
> Thank you for pushing this RFC so far!
>
> One point to keep in mind: BC breaks disqualify an option for any 5.x
> releases. Warning and the likes are not BC breaks per se.
>
> Cheers,
> Pierre
>