News for hackers. Stuff that matters.

A comment on PHP 7 deployment at Dailymotion. Parent comment

Re:PHP 7 deployment at Dailymotion by aseipp on Friday October 14, 2016 @01:30PM (#12709671)
What does this nonsense reply even mean? Nobody is talking about one-size-fits-all. People are talking about mitigating some stupid default behavior in a language. The suggestion "You're doing it wrong" just feeds into his point (that you can even get something this straightforward wrong in the first place indicates, maybe, you should put a fence there to warn people).

Programmers have so much stockholm syndrome it's unbelievable.

[ Parent | on HN ]
Re:PHP 7 deployment at Dailymotion by stephenr on Friday October 14, 2016 @02:08PM (#12709979)
> Nobody is talking about one-size-fits-all.

> I would love to be able to say ini_set('sanitize_rest', true) and deal with errors that might result from that knowing at least the strings are safe.

How is a magic ini setting to "make Strings safe" not a one-size-fits-all?

> People are talking about mitigating some stupid default behavior in a language.

What stupid default behaviour? Giving you data as its received and tools to validate/sanitize it as required?

[ Parent | on HN ]