On Pierre's blog, there's this great reminder of the progress being made towards PHP6, and some of the big leaps that have been made so far - specifically related to register_globals and magic_quotes_*

I really start to love the next major version of PHP (aka PHP6).

register_globals and magic_quotes_ have gone: #1 and #2.

The get_magic_quotes_gpc, get_magic_quotes_runtime functions are kept but always return false, set_magic_quotes_runtime raises an E_CORE_ERROR. It may help you to migrate (I was in favour to drop them all, but it was a too drastic change for my collegues :)

These changes and the GD cleanup (gd1.x and freetype 1.x support removed, some code cleanup) make me feel really better while working in HEAD that 5.x.

He also notes the recent demise of safe_mode as well.

On Pierre's blog, there's this great reminder of the progress being made towards PHP6, and some of the big leaps that have been made so far - specifically related to register_globals and magic_quotes_*

I really start to love the next major version of PHP (aka PHP6).

register_globals and magic_quotes_ have gone: #1 and #2.

The get_magic_quotes_gpc, get_magic_quotes_runtime functions are kept but always return false, set_magic_quotes_runtime raises an E_CORE_ERROR. It may help you to migrate (I was in favour to drop them all, but it was a too drastic change for my collegues :)

These changes and the GD cleanup (gd1.x and freetype 1.x support removed, some code cleanup) make me feel really better while working in HEAD that 5.x.

He also notes the recent demise of safe_mode as well.

As pointed out by Ligaya Turmelle in this blog post today, it seems that safe_mode in PHP is officially "gone".

From this Zend Weekly Summary:

Following the Paris PDM recommendations, and (unusually) with the approval of the entire spectrum of PHP developers and users, Andi went to work on removing safe_mode from CVS HEAD this week. He got as far as the streams code before he hit a problem, and wrote to Sara (for help).

Sara agreed that it was in fact a bug, and admitted that she'd probably introduced this 'slight logic twist' when routing unlink() to use stream wrappers.

Andi thanked Sara for her analysis and asked her to keep an eye on his commits to ensure he didn't apply a wrong fix in the stream wrapper code. She did; he didn't. Andi went on to clean all trace of the safe_mode implementation from the rest of the PHP core and most of the core extensions, ably assisted by Ilia.

One of the longest-lingering, painful issues that PHP has had to deal with in the past has finally been laid to rest. Here's to a positive step forward to PHP6!

As pointed out by Ligaya Turmelle in this blog post today, it seems that safe_mode in PHP is officially "gone".

From this Zend Weekly Summary:

Following the Paris PDM recommendations, and (unusually) with the approval of the entire spectrum of PHP developers and users, Andi went to work on removing safe_mode from CVS HEAD this week. He got as far as the streams code before he hit a problem, and wrote to Sara (for help).

Sara agreed that it was in fact a bug, and admitted that she'd probably introduced this 'slight logic twist' when routing unlink() to use stream wrappers.

Andi thanked Sara for her analysis and asked her to keep an eye on his commits to ensure he didn't apply a wrong fix in the stream wrapper code. She did; he didn't. Andi went on to clean all trace of the safe_mode implementation from the rest of the PHP core and most of the core extensions, ably assisted by Ilia.

One of the longest-lingering, painful issues that PHP has had to deal with in the past has finally been laid to rest. Here's to a positive step forward to PHP6!