The document discusses the state of PHP development. It outlines both positive and negative aspects of PHP's development process. Positives include an open RFC process for voting on new features and improvements to security and release processes. Negatives mentioned are slow release cycles, unsecure code, and a closed community. The document also promotes contributing to PHP projects and lists some upcoming features like improved password hashing, property getter/setter syntax, generators, and finally blocks.

1. O
PHP,
Where
Art
Thou?
Pierre
Joye
2012/09/08

2. Pierre
Joye
@pierrejoye
pierre@php.net
PHP
Core
developer
Contributors
to
numerous
OSS
projects
Works
with
the
ex-­‐Dark
Force
Portability
fan

3. Any
PHP
users
around?

4. Which
version?

5. Contributors
already?

6. The
Bad

7. • Slow
release
cycles
• Unsecure
• Hard
or
impossible
to
contribute
• Dicatorship,
egomaniacs,
nein
sager
• Closed
community

8. The
Good

9. RFC
process
hSps://wiki.php.net/rfc/voUng
• Anyone
can
submit
a
RFC
• Votes
– Communi;es
–
php.net
members
• If
accepted,
released
in
php-­‐next
(<=
1
year)

10. Release
Process
• Security
only
releases
• Bugs
fixes
releases
every
1-­‐2
months
(~)
• Yearly
releases
with
new
features
(i.e.
5.4)
hSps://wiki.php.net/rfc/releaseprocess

11. On
Security

12. Some
Security
Team
Members

13. 2012/01
to
2012/04
Xinchen
Hui
126
83
Very
Old
guy
}:-­‐>
Gustavo
Andre
79
dos
Santos
Lopes
73
Not
Very
Old
guy
(yet)
Anatoliy
Belsky
62

14. No
more
excuses!
contribute!

18. David
Soria
Parra
hSp://pear.php.net/user/dsp/wishlist
@dsp_

21. 5.5

22. PBKDF2
hSps://wiki.php.net/rfc/hash_pbkdf2
hash_pbkdf2('sha256',
'passwordP§%P4s$',
'saltSALTsaltSALTsaltSALTsaltSALTsalt',
4096,
40)
See
also:
hSp://www.iep.org/rfc/rfc2898.txt
hSp://csrc.nist.gov/publicaUons/nistpubs/800-­‐132/nist-­‐sp800-­‐132.pdf
hSp://en.wikipedia.org/wiki/PBKDF2

23. Simple
Password
API
hPps://wiki.php.net/rfc/password_hash

24. GePer/SePer
hPps://wiki.php.net/rfc/propertygetsetsyntax-­‐as-­‐implemented

25. Generator
hSps://wiki.php.net/rfc/generators

26. Generator

27. Generator

28. Generator

29. Generator

30. foreach
and
list

31. YAAR!
(array_column)

32. Fixing
empty()
empty($this-­‐>getFriends())

33. $INTL-­‐>awesomeness++;
• IntlCalendar
• IntlGregorianCalendar
• IntlTimeZone
• IntlBreakIterator
• IntlRuleBasedBreakIterator
• IntlCodePointBreakIterator

34. Fully
qualified
classname

35. Parameter
skipping
function create_query(
$where,
$order_by,
$join_type='',
$execute = false,
$report_errors = true) {
...
}

36. Parameter
skipping
create_query("deleted=0",
"name", default, default,
false);

37. Finally!
hSps://wiki.php.net/rfc/finally

38. QuesUons?