Fun with PHP releases
Posted Aug 25, 2011 5:36 UTC (Thu) by smurf
Parent article: Fun with PHP releases
For reference, is_a(A,B) used to check for "is A an instance of B". Previously, if A was a string then it's not an object so the test failed. Now, they say "well, if A is a string then it might name an object, so call the autoloader."
This is precisely the kind of nonsense automagic non-feature which has caused countless security fiascos in PHP's past and will doubtlessly cause more in the future.
It's also the reason why any PHP whatsoever is required, on my web servers, to run inside a heavily-shielded single-user fastcgi sandbox. No exceptions.
to post comments)