This document summarizes Pierre Joye's presentation about PHP. It discusses the RFC process for proposing new features to PHP, highlights some proposed features like PBKDF2 password hashing and generators, and encourages contributors. The presentation addresses criticisms of PHP like slow release cycles and security issues, but emphasizes the open RFC voting process and notes security has improved with a dedicated team. It concludes by asking for any questions.

1. O PHP, Where Art Thou?
Pierre Joye
2012/09/08

2. Pierre Joye
@pierrejoye
pierre@php.net
PHP Core developer
Contributors to numerous OSS projects
Works with the ex-Dark Force
Portability fan

3. Any PHP users around?

4. Which version?

5. Contributors already?

6. The Bad

7. • Slow release cycles
• Unsecure
• Hard or impossible to contribute
• Dicatorship, egomaniacs, nein sager
• Closed community

8. The Good

9. RFC process
https://wiki.php.net/rfc/voting
• Anyone can submit a RFC
• Votes
– Communities
– php.net members
• If accepted, released in php-next (<= 1 year)

10. Release Process
• Security only releases
• Bugs fixes releases every 1-2 months (~)
• Yearly releases with new features (i.e. 5.4)
https://wiki.php.net/rfc/releaseprocess

11. On Security

12. Some Security Team Members

13. 2012/01 to 2012/04
Xinchen Hui 126
83 Very Old guy }:->
Gustavo Andre 79
dos Santos Lopes
73 Not Very Old guy
(yet)
Anatoliy Belsky 62

14. No more excuses!
contribute!

18. David Soria Parra
http://pear.php.net/user/dsp/wishlist
@dsp_

21. 5.5

22. PBKDF2
https://wiki.php.net/rfc/hash_pbkdf2
hash_pbkdf2('sha256', 'passwordP§%P4s$', 'saltSALTsaltSALTsaltSALTsaltSALTsalt', 4096, 40)
See also:
http://www.ietf.org/rfc/rfc2898.txt
http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf
http://en.wikipedia.org/wiki/PBKDF2

23. Simple Password API
https://wiki.php.net/rfc/password_hash

24. Getter/Setter
https://wiki.php.net/rfc/propertygetsetsyntax-as-implemented

25. Generator
https://wiki.php.net/rfc/generators

26. Generator

27. Generator

28. Generator

29. Generator

30. foreach and list

31. YAAR!
(array_column)

32. Fixing empty()
empty($this->getFriends())

33. $INTL->awesomeness++;
• IntlCalendar
• IntlGregorianCalendar
• IntlTimeZone
• IntlBreakIterator
• IntlRuleBasedBreakIterator
• IntlCodePointBreakIterator

34. Fully qualified classname

35. Parameter skipping
function create_query(
$where,
$order_by,
$join_type='',
$execute = false,
$report_errors = true) {
...
}

36. Parameter skipping
create_query("deleted=0",
"name", default, default,
false);

37. Finally!
https://wiki.php.net/rfc/finally

38. Questions?