Re: PDO: Disable emulated prepares by default?

On Thu, Sep 3, 2015 at 2:33 AM, Ferenc Kovacs <tyra3l@gmail.com> wrote: > > 2015. szept. 3. 6:14 ezt írta ("Scott Arciszewski" <scott@paragonie.com>): >> >> Inspired by http://stackoverflow.com/a/12202218/2224584 >> >> Can we (in either PHP 7.0 or in PHP 7.1) turn emulated prepared >> statements off by default, and still allow developers to turn it on if >> they really want them? >> >> For now my code works around this design decision, but not everybody >> is cognizant of this behavior. >> >> Scott Arciszewski >> Chief Development Officer >> Paragon Initiative Enterprises >> <https://paragonie.com> >> >> -- >> PHP Internals - PHP Runtime Development Mailing List >> To unsubscribe, visit: http://www.php.net/unsub.php >> > > Last time we discussed this it was Anthony who proposed the change and > Rasmus shed some light on why did we have the emulation in the first place. > We can have change the default but we should have an RFC clearly stating the > impact (an additional network roundtrip and the native prepares being less > flexible vs. better security and performance gain in case of executing the > same prepared query multiple times) Sure, and I'm fine with this being a 7.1 thing since most people work around this anyway. But I would like it to be changed eventually, however. Scott Arciszewski Chief Development Officer Paragon Initiative Enterprises <https://paragonie.com>