« first day (3582 days earlier)      last day (1363 days later) » 
00:00 - 16:0016:00 - 00:00

12:00 AM
what does this pass by value reference says?
 
12:16 AM
you are passing by reference
function c($d) // that is passing by value
@ILoveStackoverflow goalkicker.com/PHPBook
 
Thank you so much
Appreciated :)
 
12:54 AM
@Wes It looks correct? What's it wrong about?
 
Wes
what i am writing is:
[tool] is used to perform [purpose]
@LeviMorrison
for example, "indexOf() is used to search the first occurrence of a particular entry in the array"
phpstorm says i should be writing
"indexOf() is used to searching the first occurrence..."
is it correct?
 
Former is better.
I recommend "indexOf() searches for the first occurrence of a particular entry in the array".
 
also gets rid of the passive voice
 
 
2 hours later…
Wes
2:53 AM
my english is copy paste from google, essentially. if i see that a phrase is used a lot then i just assume it's correct :B
 
got my dad to send me pictures of his computer set up
 
Wes
\o
 
^ about 15 years ago
 
Can tell it's old because of the aspect ratio :D
 
^ about ~12 years ago
 
Wes
2:57 AM
ah data and jenna, what a couple
 
xD
 
^ current set up
 
You should lend him your cat, that's too many mice
 
@MarkR also dat iPod
when I lived with him briefly, I used one of the computers occasionally... and I would get mice mixed up...
 
3:00 AM
But that's a nice setup. I'm still not at all satisfied with mine :(
 
he constructed the desks... he'd plan them out on paper and build them
 
The extruded metal is nice, is that an oscilloscope on the desk?
 
possibly
 
Wes
too many monitors would confuse me
 
I added another one... and I filled it up with new metrics on my monitoring tools within an hour :S
 
3:07 AM
@MarkR yes
"some of the mice are for the security camera systems"
 
a KVM is his friend :P
 
he probably just likes having multiple mice...
 
He must be more skilled at managaing them than I... I go crazy when I have two... then again they're identical and both wireless :S
 
Wes
3:24 AM
reminds me i have a dvi-i kvm switch that i don't use that costed me 200€
i should probably have a second pc here and make use of it
my "2 computers ago" computer should be good enough to write some code
it's an amd am3 or something
 
I'm considering getting a second box when I find a job, specific for dev work, and move all my dev projects to that...
I'm sick of getting symlink issues with composer and npm because I'm on Windows, but I'm using a Linux VM and a shared folder between the two
 
Do you run Hyper-V?
You could always run your IDEs etc inside a full screen VM
 
yeah but wouldn't I have to give the VM enough memory? I only have 16 and my host OS uses a lot of that :X
I use Virtualbox, Vagrant and slowly adapting to Docker.
 
another 16gb of memory is a lot cheaper than a second computer.
 
I mean, if I wanted that route, I could just get a second SSD and install ubuntu on that
 
3:32 AM
what the... I just noticed my RAM is running at 2133 Mhz, what is that BS O_O
I'm going to power cycle and fix that, goodnight all
 
goodnight
 
@Tiffany The mices @_@
 
 
3 hours later…
Wes
6:29 AM
mornen v2.0
BETA
 
6:48 AM
It's not released yet!
 
I'll release it around 10 AM :)
 
7:10 AM
@Derick You already made my day :)
 
7:32 AM
@Kalle Unfortunately there may also be some licensing issues, at least Johannes said so here: github.com/php/php-tasks/issues/15
I have no idea what that really means though (does it mean we can't bundle the lib?)
@Sjon Looks like all of them are expected changes due to numeric string stuff
 
@NikiC check. I'm batching the whole set now, will keep an eye on it
 
7:55 AM
morns
 
8:28 AM
someone is going to run into a weird sql error when upgrading to PHP8
 
cmb
8:38 AM
@Sjon yep, that's a tough one; voting passed with 30:4, though
 
@cmb 44:1 :)
 
cmb
Ah, right! twitter.com/zend/status/1291159694963245056 to the rescue :p
5
 
@cmb lol
 
cmb
"LTS until at least 2023"
 
wtf
 
8:55 AM
Hi @Derick, so to continue the discussion from yesterday: Could you help me to understand the code from timelib?
https://chat.stackoverflow.com/transcript/message/50133418#50133418
https://chat.stackoverflow.com/transcript/message/50133533#50133533
 
@cmb wat
 
@GabrielCaruso awesome
 
@NikiC Do I win a prize?
 
@salathe Yup, you get the "Cast the largest number of No votes on RFCs" award :P
 
I'm not sure that's actually the case :)
@GabrielCaruso "The PHP team is pleased to announce the second testing release of..." Alpha 1 was the first testing release, and alpha 2, alpha 3, beta 1 are all the second testing release?
 
Wes
9:48 AM
$country = $session?->

if ($session !== null) {
this is confusing as hell guys, help me one sec
does ? check that $session is set?
i thought it would check whether the object's member is set and not null
 
cmb
?-> is about whether the left hand side is null or not
 
@SebastianBergmann How? :-)
 
Wes
the left hand side? :|
 
@Derick Pixel counting ;)
 
Oh, right ;-)
 
Wes
9:53 AM
$session = new class{};
$session?->country
so this will result in
Warning: Undefined property: class@anonymous::$country anyway?
i am having a brain fart
 
cmb
yes (could use ?? to have a default value)
 
Warning: Undefined property: foo::$country in Standard input code on line 6
 
@salathe Oh, sorry, I'll fix it, thanks!
 
Wes
not what i expected it to do
 
@Wes the use case is:

    function foo($session) {
      $session?->country;
    }
i.e. where you haven't instantiated it yourself, because obviously it won't be null
 
Wes
9:58 AM
seems $session? and -> should be two separate things then, because you could use it with other key/offset operators, like $array?[3]?[4]
 
sapi/litespeed/lsapilib.c:2627: possible unterminated string ・ *General Issues ・ #79936
 
@Wes and $session?->country? would be nice
 
posted on August 01, 2020

If you read last week’s comic, or last week’s news, you know I was expecting a hurricane. That hurricane (thankfully) decided to dodge us at the last second. Landfall or no, we still had a considerable about work to do to prepare our home. We disassembled the table outside, tied things down, and brought in all of my wife’s plants from the porch. Once inside, the plants were calming to l

 
@salathe Done github.com/php/web-php/commit/…, thanks for the heads up :)
 
@salathe ?$a?->?b?
 
10:00 AM
@GabrielCaruso thanks
 
@FlorianMargaine Just been scrolling down on platform.sh main page and at some point I thought "lol z-index fail"
 
@NikiC ¿$a?->¿b??
 
@bwoebi the intentional ones?
or something I'm not seeing on my browser
 
@FlorianMargaine nah, if you scroll down to the caroussel, it'll overlap the logo on top
 
Wes
it's good though, i just had the wrong idea in my mind, and yes it should also exist in the form of $array?[1]?[2]?[3] probably
 
10:03 AM
ah yeah nice
thanks
@bwoebi I hate you because you're having me open jira
 
@FlorianMargaine haha
 
@Wes Array isn't supported due to ambiguity with ternary operator :(
 
Wes
another thing that would worry me slightly is if this does not produce any error
$foo?->bar() when $foo is not set at all
function(){
    $foo = null;
    $foo?->bar();  // ok
}

function(){
    $foo?->bar();  // undefined variable or something
}
 
@Wes it does produce an error :)
 
@Wes it is the case
 
Wes
10:10 AM
amazing :D
 
@Sjon 3v4l doesn't like that syntax btw ^^^ :)
 
@FlorianMargaine yeah, with the feature-freeze I'll look into rebuilding the parse
 
Wes
ah it's in the future scope, the $array?[3] thing
maybe $array??[3] or something is possible, but it's pretty bad if it has to be different
 
I think the function call is not stronger than the static property operator ・ Documentation problem ・ #79937
 
@NikiC are you pushing php8 changes to php7.y in PHP-Parser?
 
10:25 AM
@Sjon yes
@Sjon nullsafe isn't there yet though. I'm a bit behind on PHP 8 support
 
@NikiC okay, if you want to you can ping me if you get to that, I'll push it to ace
 
10:37 AM
@gharlan Can you start over? These transcripts from last night are not coherent
(for me)
 
10:55 AM
Ok, I'm looking to these two functions: https://github.com/derickr/timelib/blob/master/parse_iso_intervals.re#L106-L150
And if I understand the function bodies correctly, the first one parses unsigned numbers, and the second one additionally supports "+"/"-". So the second one parses signed numbers.
Is this correct? If yes, I am wondering why the first one has the "signed" return type, and the second one has "unsigned". I would expect the opposite.
(But I am new to C, so my understanding might be wrong there.)
 
@Derick "Ilija declined to be talking to me." Haha that just makes me sound like an ass xD @Danack Thanks for taking my place :)
 
@gharlan the first one parses a number such as 2390293, the second one parses a number such as +332 or -323
signed numbers = 0 or above, unsigned = negative numbers too
err, wait
that's the other way around
the unsigned one is making sure it's returning a signed number in practice though
(which is fine, because max unsigned > max signed)
so I guess it's just so that he can call the function with unsigned ints without having to cast?
 
11:11 AM
Ok, but my understanding is correct, that the second one, called "_unsigned_" has the intention, to also parse signed numbers.
 
correct, it always returns an unsigned though
 
And the first one, which returns a "signed" number, actually returns positive numbers only.
 
because of the dir = -1 and dir * ...
@gharlan no
strtoll() converts a string to a long long integer
   The string may begin with an arbitrary amount of white space (as
   determined by isspace(3)) followed by a single optional '+' or '-'
   sign.
he's just doing the thing to check if it has a - in order to always return an unsigned number
 
isn't it ignoring all chars except 0-9 (line 112)?
 
that is a good point
sounds like a bug
because if you pass "-123" to the unsigned function, it's going to return -1 * 123, which is not a valid unsigned number
 
11:18 AM
and the second one uses the first one (positive numbers, but returned as "signed"), and multiplies the result by "dir". So the second one wants to return the signed value, but has the unsigned return type.
 
so name of the second one probably should be better "timelib_get_signed_nr" and return type should be timelib_sll
 
no, I think the bug fix is that timelib_get_nr shouldn't ignore - and +
because that function should be able to return a signed number
 
cmb
@gharlan nope, since strtoll is called on str, not on ptr
 
@cmb but str's begin is set based on ptr
	while ((**ptr < '0') || (**ptr > '9')) {
		if (**ptr == '\0') {
			return TIMELIB_UNSET;
		}
		++*ptr;
	}
	begin = *ptr;
 
cmb
11:23 AM
from what I can tell, ptr and begin are only relevant because ptr is an in/out parameter; only the return value is relevant for timelib_get_unsigned_nr()
 
@IluTov Oh, not at all! :-)
 
@cmb not sure what you're saying there
 
@gharlan hmm, that makes no sense to me either
 
str is defined as str = timelib_calloc(1, end - begin + 1);
i.e. it depends on begin, which is defined based on ptr
 
cmb
oh, you're right!
 
11:26 AM
Has anyone migrated from Phalcon to Symfony? Would like to hear your experience of the process.
 
they both should return a timelib_sll
 
@Derick but then you have potential overflow problems if your existing callers were passing too big/small numbers
assuming that's a concern at all
 
TIMELIB_UNSET = -99999
and it's static, so it's an internal API
 
albeit long long is pretty big
 
yes, 64bit for a timestamp is plenty
63 bit too
it's -292 million years to +292 million years, give or take
 
11:34 AM
should be fine, they said in the '70s
:P
(j/k, that was for 32 bits)
looks like you were right all along @gharlan, my bad
lines 202 and 319 are weird
I'm surprised it even compiles
oh I see
github syntax highlighting is broken
apparently using the same broken syntax highlighter as vim :)
 
11:49 AM
what is more annoying is that locally, gdb is getting line numbers wrong
 
isn't gdb going to use the generated file's line numbers?
or does re2c provide a gdb plugin to do a "source map" somehow?
 
cmb
@NikiC if Johannes is right, we have an issue with libmbfl, since we don't (allow to) build that as separate shared object.
 
https://dev.azure.com/phpazuredevops/PHP/_build/results?buildId=9987&view=codecoverage-tab

Should this show me php-src's code coverage?
 
@GabrielCaruso Pretty sure code coverage is only done on the nightly pipeline which does ASAN, MSAN and co
 
Segmentation fault ・ *General Issues ・ #79938
 
11:55 AM
@Girgias Cool, let me try to find that
 
@Jeeves yes, let's encode a coredump in base64 and dump all this meta-data in a txt file instead of a tarball
 
They should, but MS did something with Azure Pipelines where only members of the organization can see stuff or something I don't know exactly what changed again
But I coundn't see the test result tab anymore
 
Oh shit. I can see the master runs, but only that: dev.azure.com/phpazuredevops/PHP/…
I'm trying to see it to prepare a PHPTestFest :(
GCOV is also gone gcov.php.net
 
@GabrielCaruso That's why we moved it to Azure Pipelines
Cause the GCOV box is apparently to old and upgrading it is a pain
 
12:06 PM
Gotcha
Let me dive deep on Azure to find the public links to coverages
Well, the URL looks similar: https://docs.microsoft.com/en-us/azure/devops/pipelines/test/review-code-coverage-results?view=azure-devops

Perhaps is the permission issue you mentioned
 
12:28 PM
@cmb we allow building mbstring as a shared object though
 
cmb
But in that case, wouldn't mbstring have to be LGPL?
I hate those license issues.
 
@cmb I have no idea. Don't even speculate on it.
Basically, licensing issues only exist insofar as people make them exist themselves.
 
Morning
 
 
@cmb Happy to answer questions on it, but I missed the story. What's up?
 
12:34 PM
As far as I understand, it's not a problem if we provide the source code
It's sufficient that people can just replace the bundled libmbfl with their own
 
cmb
ah, probably right; the restrictions only apply to closed source using LGPL'd libs
 
yup
 
@NikiC About github.com/php/php-src/commit/…: what permissions do I need to have to see it? GitHub ones?
 
I would not be in favour bundling an LGPL library, mostly because the legalities haven't been tested in most courts. I would advise to stay well clear of it.
 
12:40 PM
RFC 822 and 2822 missing from DateTime "Compound Formats" ・ Date/time related ・ #79939
 
@Derick It actually seems clear cut for PHP's case, because PHP is an open source project. The unclear parts are if PHP were not an open source project but used an LGPL library.
 
Nothing is really clear cut with the GPL or LGPL, as it's an atrociously complicated license. It would have been OK if PHP was an Open Source GPL project, but it isn't. I suggest you talk to Remi and Ondrej as Johannes suggested.
 
Sure, this is all just speculative anyway
 
cmb
Even if you ask a lawyer, it may still be speculative.
 
I mean, the idea of using libexif is speculative
 
12:45 PM
I treat everything that it's GPL or LGPL as I would treat an unshielded nuclear reactor.
 
We can also just drop the exif extension instead, you know
 
I don't think that helps anybody.
 
(Just to make it clear that "just stay away from LGPL" is a pretty useless statement to make.)
 
I wonder what perl uses
sub DoHardLink($$$$$);
such a lovely syntax...
 
@Derick wat
 
12:56 PM
Had a look at what the exiftool linked to; it wasn't anything, but I spotted that Perl syntax
 
Lots has changed in the extension API since I touched it last...
 
github.com/php/php-src/pull/5945/… foreach ($options as $option) try { TIL
 
Glad I started with something simple like FTP to get back into this.
@GabrielCaruso 100% valid PHP syntax.
It's my C++ sneaking in.
 
That is interesting, I didn't know :D
 
Control loops take precisely one statement. That statement is USUALLY a { statement-list }, but it doesn't have to be.
 
1:35 PM
@GabrielCaruso TIL
 
Same. It'll probably confuse the hell out of anyone who tries to maintain it :p
 
There's no particular reason we couldn't loosen function bodies the same
function foo($bar) return $bar + 1;

But I think that would piss off a number of IDEs. :)
Will it?
 
@GabrielCaruso That's only a parse error for 7.x because you're not catching into a variable.
Which is an 8.0+ feature :p
 
1:38 PM
Yeap, but the "Control loops take precisely one statement. That statement is USUALLY a { statement-list }, but it doesn't have to be." sentence was dangerous, now I wanna try it with everything :D
 
안녕하세요
 
Has any of you set-up azure pipelines for an extension yet?
 
How is if (condition) statement news to people? o.O
 
In the final-review plates for "PHP & MySQL Web Development 3rd edition" there was a typo in a line that was supposed to look like:

foreach ($result as $row)
printRow($row)

Only there was a semi-colon at the end of the foreach line. :O
 
cmb
Do we want to add a notice to the download section of windows.php.net regarding Windows Defender flagging some of the auxiliary test files as backdoors?
 
1:40 PM
@salathe I think the surprise is more about try { ... } catch { ... } being a single statement
@cmb There's a non-zero danger of that causing more alarm.
 
@Sara I updated createReleaseEntry a little, so I could copy and paste the "git add" without having to do it twice :-)
 
cmb
I think it's also because most coding standards enforce braces always.
 
@Derick Whatever works, brother.
 
@Sara Yeap, that
 
I'm usually the one being pedantic about using braces on if conditions, but try/catch is an exception to that rule in my mind because it already HAS a statement group
 
1:42 PM
^ I didn't think a try catch was a single statement lol
 
cmb
@Sara well, I just received a report from an alarmed user :( But maybe wait a bit; maybe Windows Defender will be fixed (I don't expect that, though)
 
Could PHP use/benefit from this? github.com/simdjson/simdjson
 
Seem to be defender is just being honest about what PHP is there @cmb
 
@cmb I'd certainly have a page about it, but the front page of windows.php.net should probably just be "Are you seeing a warning from Windows Defender™? Check out this help page."
@Girgias From a grammar standpoint anyway. Any statement list grouped in braces is also a "single statement" from a grammer pov.
 
cmb
I barely dare to touch this "CMS", though. But yeah, could make a blog post, and link to that.
 
1:45 PM
@cmb btw, Thank you for stepping up to keep these builds going. I don't know what happened with mwop, he's gone radio silent since his first message.
 
@Sara Huh, interesting. I don't really do parsers should probably read up on them
 
@MarkR Anyway, I'm not against adding additional braces here. It's SO not a hill worth dying on.
 
It's the separate 'catch' in being considered the same statement that throws me. I mean it kinda makes sense, it just feels funky.
 
https://github.com/php/php-src/blob/master/Zend/zend_language_parser.y#L502

Note how the entire chain from try through catch to finally is all one "statement"
@GabrielCaruso THAT I would hard-nope on in a code review.
 
cmb
 
@Sara if -> if something blows up take care of it -> otherwise do this :D
 
@cmb 5.6.... yeah.... he did say their build project was related to supporting EOL versions. :/
@GabrielCaruso Oh no, I can't parse it fine, but it fails the trivial scan test.
And yes, I may have just argued against my abuse of syntax right there.
 
jk, was playing with this that we've just learned
I've shared in my company slack and got blocked, didn't understand why :P
 
hahahahahaha
 
snirk not the word I was looking for
 
2:01 PM
Speaking on internal discussions about PHP. That issue @alcaeus came around with yesterday. I tracked down the cause and it's.... sort of everyone's fault.
Basically, the shutdown process needs to call object destructors and resource destructors to make sure everything gets cleaned up. That's good.
However, this means we potentially find ourselves back in userspace during shutdown, which isn't grand.
Because of this object destructors are strongly encouraged to not do any non-trivial cleanup. After all, we now have a bunch of live objects in degraded state.
I gave him a trivial workaround for his stuff, so he's happy, but I'm wondering if we should skip calling stream_close() on userspace wrappers during shutdown. Or... maybe rethink shutdown, because rolling back the entire global scope (not just objects) seems like a reasonable idea, but there's probably a good reason for the state of things.
 
@Sara sounds like my fun project yesterday, a warning in shutdown, calling a user error handler, converting to an exception, long jumping out of the shutdown handler of the extension, not cleaning up
 
^^^ Yep. Shutdown is hard.
@Tiffany "snerk" seems entirely appropriate there
 
yesss, that was the one
 
2:20 PM
I was going to say that seems like a good idea @Sara, then saw your big edit scrapping it :(
 
Just make sure you code can never crash, simple! ^^
 
@Girgias I think we need something to stablize the edges before we start mining or it's going to be a mountain of pita.
 
@Sara That sounds yummy.
 
I mean. We can still make zpp work, but it'll take some callback hand-waving
 
@Sara Oh for sure, but I have no clue how streams work, my only internal interaction with it was it's weird way of dealing with user streams and non defined methods and I was wondering why on earth there is no stream interface...
 
2:22 PM
hrmmm... in fact, I have an idea....
 
This is what I think of when mentioning PHP's streams - youtube.com/watch?v=mCSUmwP02T8
 
@Sara Well I was toying with adding a flag to the callable ZPP check so that non-static methods could pass it for a reflection class, Nikita (rightly so) shut it down :')
 
Does anyone here have sudo on the php.net jump hosts?
 
cmb
@salathe maybe @Derick?
 
@MarkR LOL.
 
2:25 PM
ext\standard\tests\streams\stream_get_meta_data_process_basic.php is failing on Windows/Appveyor with a TypeError in it
 
I do, why @salathe ?
 
@Derick Can you add "sergey" as a new user? :)
 
@cmb Can we do non PGO builds for snaps until there is a VM using a CI provider. Something similar to github.com/shivammathur/php-builder-windows
 
@Sara Gonna be honest, having trouble understanding what's going on in the 'R' resolver part, the part I've dealt with callables is with the FCI and FCC structs. But I think I have trouble understanding as I haven't looked into how streams work
 
2:38 PM
'R' type would take two args. First arg is a reference to a void* to populate the resolved param value into. The second arg is the resolver function. In the case of streams, that function would be something that (initially) says "Are you a resource? of type stream? great, give me your php_stream pointer. If not, error." Later it'd be "Are you an object? of type FileStream? Great, give me your inner php_stream*, otherwise type error"
In that comment I'm suggesting the callback would throw an exception, but on more thought I think having it take the void* by ref, and return NULL on success or a string of the excepted type on failure (closer to what zpp does internally).
The idea is the Zend part of this change wouldn't be specific to streams. It'd be usable for any complex type.
For example, my FTP case, could have zpp populate ftpbuf_t* directly using a resolver function that knows to grab the ftp field out of the FTPConnection object.
Instead of doing an object zval* fetch followed by a separate "make sure this is still live" macro in the function.
I think I'll make a branch with real implementation to turn into an RFC.
 
Right, so the callback is the part which handles the population of the stream/object? I really need to look into how objects work on an engine level.
But seems this could reduce some boiler plate macro code which needs to be there.
But would that really require an RFC? Seems like a simple addition without braking the old way of doing it.
 
There's room for some legitimate bikeshedding. Whether that's a formal RFC or if it's a brief email discussion is arguable. Probably start with the latter. After all, it's not even user facing.
Still a PoC implementation would help that discussion.
 
2:55 PM
@MarkR This is probably a discussion to have elsewhere. There is an appropriate police department in Austria to handle this. They fobbed me off before, and told me to talk to the police in the UK. And the police in the UK said, there hasn't been a crime comitted in the UK, talk to the police in Austria.
Send me an email address to forward you some emails to?
 
You can use marandall@php.net if you'd like
 
Also, make sure you have a big glug of water in your mouth when reading one of the emails....just so you can set a world record for spit-take.
 
@Sara wouldn't it be simpler to convert the stream context resource to an object? As that seems rather orthogonal to the streams themselves
 
@Sara Does that really making anything easier over just fetching zval and then doing if (!stream = php_stream_from_zval_or_throw(zv)) return;
to indicate what param was problematic? Maybe, but then your proposal isn't sufficient either
 
@MarkR for the record, he seems to be 'quite annoyed' when people use the contact form on 'thelou nge .n et'.
 
3:09 PM
Anybody with OSX here can let me know what the value of PHP_OS is?
@salathe Uh? I can, but I haven't gotten an answer on how to get 2FA going, so I'd rather not
 
@Danack Help me parse please. What's that domain and which part of this is his ISP?
 
It's his company
 
and they own the IP addresses used to post?
 
not his, the one he works for
let me see if I can find out the IP address
 
@Derick PHP_OS_FAMILY is Darwin on my colleague's machine, if that helps
 
3:13 PM
No, PHP_OS, not PHP_OS_FAMILY, please :-)
 
peter@Bibracte ~ $ php -r 'var_dump(PHP_OS);'
string(6) "Darwin"
 
thanks
 
@Derick 2FA isn't going?
 
It doesn't activate for me, and I couldn't set it up for Gabriel either, as I don't know where the binary went
 
weird, it prompts me as usual
 
3:16 PM
@MarkR that is where he has worked for many years. They have a contact us page. Hypothetically I may have used it to ask them to block him from accessing php.net from their company network. But it seems he intercepted that, and it provoked the email.
 
@bwoebi That's the other option: Just use 'z' as the type specifier and make converting that ENTIRELY down to the function called explicitly. It takes no changes to zpp to make it work which is good.
 
@Danack We have records of him using that network to bypass our measures I assume?
 
My MAIN desire is to put the periphery of streams usage into a state where we can mostly ignore them when we do the big conversion.
 
@Derick ha! europe (jump2) doesn't prompt for 2FA but americas (jump3) does :P
 
oh, how odd
jump2 didn't even have the google-auth binary
 
3:18 PM
whoops
 
@Girgias It is orthogonal. We're going to have to do that as well, and probably before main streams, but it doesn't address the bredth of the issue.
 
@MarkR I don't think figuring out which IPs have been used is a useful thing to do. (Also, I don't have access to that info.) The using different email addresses is easier to demonstrate and easier to show bad intent.
 
@MarkR have a link to a bug he commented on?
 
@Sara Well, you're the stream expert here. So I'll trust your word on how to go about it instead of my hand wavy guessing
 
cmb
@Derick I have deleted his latest comment yesterday (was on the wrong ticket)
 
3:21 PM
@Derick I'm afraid I don't. I assume querying the DB should find a few
 
cmb
@Danack he is self-employed; it's his own company
 
MariaDB [phpbugsdb]> select id, bug, visitor_ip from bugdb_comments where email='bugreports@gmail.com';
+--------+---------+------------+
| id | bug | visitor_ip |
+--------+---------+------------+
| 359418 | 78505 | 0 |
| 359594 | 78532 | 0 |
seems all the IPs are "0"
so there is that
 
Well that's going to be a bit of a hassle to lookup :P
But that's visitors, isn't their a submitter IP?
 
cmb
@Derick IPv6 issue; there is a PR from Peter K. somewhere, IIRC
 
@cmb I am somewhat surprised that someone with his abusive nature is able to run a company that has multiple offices.
 
3:23 PM
what was his latest email address?
 
I thought he might be the chief tech person, but the company be run by someone else.
 
ping?
 
I hath no idea, but I see you blocked /(rhsoft|reindl|phpbugreports|bugreprtsz|bugreports\d*@gmail)
 
cmb
@ShivamMathur ah, nice! That would be option, but we can't upload to windows.php.net (FTP server access to that machine is blocked by IP). We could simply put a README into windows.php.net/downloads/snaps/master, which points to your repo for now.
 
On the other hand.... I've just actually sat down to do grep -r php_stream_to_zval ext/ | wc -l and the answer is only 60. So I may be making a tempest in a teapot.
 
3:35 PM
@MarkR I have an IP for the latest one (bug 78681)
 
@cmb ok! That would be cool.
 
@Derick Look up its owning network
 
% Abuse contact for '213.142.96.0 - 213.142.111.255' is 'abuse@t-mobile.at'

inetnum:        213.142.96.0 - 213.142.111.255
netname:        TMA_TRA_WEB-APN
descr:          T-Mobile Austria GmbH
country:        AT
admin-c:        TMA5-RIPE
tech-c:         TMA5-RIPE
status:         ASSIGNED PA
mnt-by:         AS8412-MNT
created:        2010-04-13T11:37:05Z
last-modified:  2010-05-25T05:44:40Z
source:         RIPE # Filtered
it's the only one I can find because the rest has been log rotated way
 
That's who I'd suggest firing off an email to then @Danack. Include the IP and a list of measures taken to prevent access, approximately how many times they've been bypassed, and steps taken to inform him that further access was prohibited. For bonus points, get a rough approximation of how much time has been spent clearing up after him and bill it at $100/hr.
 
Hrmmm.... I could put in a hack (local only not committed to upstream) to let FileStream objects pass a 'r' check, since they're just pulled out using php_stream_from_zval(). Then I can get it all working and fix the zpp references later.
That sounds so much more unreasonably sane.
 
3:41 PM
@Sara yeah, then I'd go with not changing zpp, especially for something rather transitorily
 
cmb
@Danack ah, the subdomain contentlounge. explains it: he's the technical contact (and likely developer) of the CMS the company uses for (some of) its projects.
 
Yep.
I think I just needed to rubber duck it
 
cmb
@Sara would that work for PECL and other (potentially private) extensions?
 
@cmb No, they're just going to have to deal.
Oh, you mean if we left the hack IN? I mean... probably, but... ugh. Don't wanna.
I mean, maybe. IF it had a clear end-date on support. Like 9.0
 
cmb
Giving extension maintainers a smoother upgrade path would be nice; just for some time.
 
3:58 PM
Yeah. There's a good argument there.
I just dislike the idea that zpp can "lie" about the type.
But since we're retiring resource, that's probably okay.
 
00:00 - 16:0016:00 - 00:00

« first day (3582 days earlier)      last day (1363 days later) »