undefined | Better HN

0 pointsck213y ago0 comments

He did make it work with php 5.4.0 when the branch first came out.

That was "only" six months ago so it's not forever.

Unless you do not use any third party code and have your own code audited, it's foolish not to run with suhosin.

I'm still trying to get over the naked feeling of running without magic quotes in 5.4 when using third-party code.

0 comments

1 comments · 1 top-level

Point taken but I don't understand your aversion to no more magic quotes. Yeah, it's helpful when you run third party code but the benefits outweigh the costs. Anyone running third party code should be testing it first anyway and in the long run magic quotes gave people a false sense of security and promoted a very lax attitude toward security no matter how many times people screamed about not relying on magics quotes.

j / k navigate · click thread line to collapse