Fun with PHP releases
Posted Aug 25, 2011 5:36 UTC (Thu) by
smurf (subscriber, #17840)
Parent article:
Fun with PHP releases
Cute.
For reference, is_a(A,B) used to check for "is A an instance of B". Previously, if A was a string then it's not an object so the test failed. Now, they say "well, if A is a string then it might name an object, so call the autoloader."
This is precisely the kind of nonsense automagic non-feature which has caused countless security fiascos in PHP's past and will doubtlessly cause more in the future.
It's also the reason why any PHP whatsoever is required, on my web servers, to run inside a heavily-shielded single-user fastcgi sandbox. No exceptions.
(
Log in to post comments)