I believe what they're trying to say is that if all your operations occur on the client side there's no server that can be compromised. This is how password vaults work.
Yes. this answer is misleading. Feeling like PHP is missing some, not client-side and server-side. I don't have enough points in bitcoin SO, if anyone got please add a comment and make it clear.
meh. I don';t use linked in, but I have a connection to enrico S......omething at elastic search from trying to sort out some drama previously. It probably distorts things a bit.
> PHP has had many breaking changes over the years. PHP 8.1 introduced a much more annoying deprecation: Deprecate passing null to non-nullable arguments of internal functions.
@MarkR I've heard good things about tideways.com assuming that you are wanting to investigate your slow down you think you're having in the json encoding, it's probably the best for that type of targetted profiling.
btw, it might be worth just finding out what the max memory bandwidth is in your server, and just figuring out what % of it you're using. you've mentioned before that you are serving quite a few requests per second, and it's possible you're just running into a bandwidth bottleneck.
@Danack It could be, so far I've had little success recreating the issue locally. I've been spamming the hot path with a mini profiler that uses short closures to wrap the call. I can reliably make it jam up within the json_encode on the server but that's strictly clock time, not cycles
Was out of the house most of the day, but my computer occasionally wakes up to do synchronization things. R11 was the active window in my browser, so probably that.
@Danack The lower tiers were meant to be aimed at someone using amphp for a personal project that they found value in, e.g., home automation controller. I'm not sure where the cutoff should be for an individual, but I was trying to encourage business to sponsor at a higher tier.
One of the things that depresses me, is that for many open source projects, if each company paid their fair share, the cost to each of them would be trivial.
Something that needs to be suggested to github is for them to allow companies to pay small amounts per month, and have it split between their dependencies.
It takes too much effort to sponsor twenty projects $5 each.......but if a company could sponsor $100 a month....that takes moments.
How would the money be divided? Dividing it evenly doesn't necessarily correlate well with the effort to maintain some open source projects or how much an app depends on a project.
@Trowski I seriously need to write more words down......or go to bed.....but what would be the desired outcome from attempting to dividing it in a way that is more 'fair' than evenly?
If the answer is anything close to "to prevent people from getting more money than they deserve", then I'm going to gesture wildly in the direction of Jeff Bezos and Elon Musk.
@Danack Some packages are mission critical, the foundation on which an app is built. Some are small tools that require little maintenance and/or updates. Giving the same funding to both doesn't quite feel right.
No idea how that funding could be split in an automated way that couldn't be deemed to be unfair in some way.
@NikiC I can't find them :s and don't seem to have set any recovery details ... we look locked out, unless by any chance I've emailed you a password around that time for anything else (I'll have used the same one) ... possibly I emailed it from the account I'm locked out of ?
If I may ask, when we were wondering why you cut off your github sponsors and you said it was a bit conflicty, is that because your new full time position is the foundation?
I dunno about that ... the average user surely puts less effort into reporting the bug than someone who uploaded 3 screenshots to the interweb ... they're putting in the effort for sure, just ... doing it wrong
@RemiCollet "In your 1st step, you download the repository home page, - well, that deserves some sort of prize. Have I linked you this before basereality.blogspot.com/2013/03/… ?
@Derick sounds like they have it all locked down to the everyone role, which is not uncommon. You may need to contact Roman or someone else (speculating) to receive access.
Yesterday announcement was MUCH more time consuming than I expected
and actually, I think the php-8.1.0 tag should have had a clean NEWS from the start. The detail of what happens between alpha/beta isn't relevant
Also, I was wondering how relevant it is to see, e.g., Fibers bug fixes that happened in RC as part of it. Those were fixing new stuff, so seeing those entries in NEWS while coming from another stable release doesn't make much sense
example: Fixed bug #81202 (powerpc64 build fails on fibers). (krakjoe) For someone coming from 8.0.13, this is pointless
I would be tempted to say that all bug fixes related to fibers could be cleaned. More importantly, the NEWS file does not include something like: Implemented: Fibers support
Things like "readonly properties", "first-class callable", "fsync", "fdatasync", "array_is_list": none of this exist in the NEWS file
@PatrickAllaert UPGRADING is important for the migration guide, where new features needs to be listed as well as changes. And doc team won't wade through all news entries for that.
Mhhh, I thought migration guide was exclusively about behavior changes and what you were supposed to modify in your code for it to continue to work, while new features being elsewhere
@HamzaZafeer none of them? what are you trying to do, and how do you plan on using either to do that?
like, if I were to ask "hey should I use a hammer or a drill" any answer would be a huge guess on what I'm trying to do, and whether it implies nails or screws, or the type of wood I'd be hammering screws into.
@PatrickAllaert wiki.php.net/rfc/scalar_type_hints_v5 still counts, despite the apparent yes vote from Z, as there was a lot of bad behaviour trying to block that vote.
so, what is a compelling way of expressing the idea that, if something becomes evidently broken after a tool change, sometimes it's because it was broken to begin with, and that the tool only prevented hiding the problem behind uncertainty?
case in point, converting some ($i == '0') to stricter equality and sane types got me in some kind of downward spiral which eventually lead to a succulent $i == '5_34' down the road, where someone had profited from loose equality to hide a string in an id until looking for it in a function hidden way, way down the execution path.
For the record I am entirely disgusted by the attitude of people who work for companies who give totally biased advice that is based solely on their own interests, but expressed as if they are neutral parties.
When you have the CTO of a company getting involved in a discusssion, and he just so happens to think that the choice that minimises the costs of maintaining the software he uses, it's absolutely not a neutral voice.
he's trying to persuade the PHP project to act in his interests, in preference to anyone elses.
This happens in every discussion where people who work for companies don't get want they want. They just instantly go to emotive language to try to get their way, instead of ponying up some cash.
> I know that saying 'no' to users is draining as they so often try to guilt maintainers into doing work for free. If anyone would like me to help explain to users "your company needs to start sponsoring this project before this project will acknowledge this issue", in any of their projects repos, please ping me on twitter
This feature is of no interest to me since I don't use dynamic properties because I consider magic to be bad practice. However, yes, there's are a lot of libs on packagist who may be using dynamic properties, it would be good to have some numbers on that before a feature is integrated to maintain compatibility. If it's on his interest or not, has me without care.
A car I was in, due to the sun being very low, the driver failed to see a parked truck, and so we went into the back of it at 40mph. As the backseats of the car didn't have seatbelts, I went for a bounce around the car...
And then I sat at a computer for like 15 hours a day for 30 years....which I also don't recommend doing.
@NikiC I think we eliminated memory from contention, I threw together a custom extension that preallocated 1mb of memory for the smart_str, it didn't seem to have much effect. I can't use perf at the moment because the WSL2 kernel doesn't play nice with it.
Would you have any thoughts on the idea of a cachable serializable object? We're thinking that we could introduce a JsonPreserialized class that would contain a zstr for the contents and then do:
if (instanceof_function(Z_OBJCE_P(val), php_json_cached_serializable_ce)) { /* copy the pre-calculated string onto the smart_str here without any additional encoding */ }
The problem we're facing with that approach is it would be almost trivial to do if we modified json_encoder.c, but putting it in a custom extension would require copying almost all of json_encoder.c
er, it was 35 years ago....which unforunately means the tech for checking out skeletons kind of didn't exist (yes, xrays were a thing, but not great at detecting small fractures),
So I fiddled about with json_encoder.c and added a new interface called JsonPreserializer which has a jsonPreserialize method returning a string. The string is just the result of json_encode() called in the constructor for a class implementing JsonPreserializer.
I performed a nested loop, 50000 iterations encoding an array of 200 items (sub arrays containing about 15 keys, resulting in around 700b each).
Re-encoding the entire array each time took 4.93 seconds. Re-encoding using the pre-serialized copy took 1.14 seconds,
well, finally finished with moving and getting all settled, so i can start working on operator overloads again, and i find that the ASTs for comparisons have totally changed, lol
@Ekin Maybe approaching it through the angle of debugging existing code is an accessible hanging fruit. For instance, writing a test to reproduce a problem can present a good case study of the cost and use of tests, from refactoring towards testable (or even settle on tested) code to having a measure of how solved it is
so I've added the defines for the two new op codes in zend_vm_opcodes.h, increased ZEND_VM_LAST_OPCODE by 2 for the two new opcodes, and added the opcode names and flags to zend_vm_opcodes.c
@NikiC yes, but i didn't think that would result in an invalid op code error. i see that's where the error is thrown from, however it seems like it should only throw that error if there's something missing somewhere else.
ah i see now
shouldn't this generation be handled by the flags though? I set it as the same as IS_SMALLER: 0x00000b0b
hmmm, greater than comparisons with NAN are returning true now
specifically the 0> NAN and 0 >= NAN cases. The 0 > $nan and >= $nan cases are correct, so there's something reverse in the CONST CONST handler i guess?