Search found 494 matches

by igorw
Mon Feb 06, 2012 10:51 pm
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC|Merged] Require PHP 5.3
Replies: 67
Views: 81714

Re: [RFC] Require PHP 5.3

I was hoping I wouldn't have to argue about that point, but I guess I was optimistic. The hosts don't upgrade because the apps run on low versions. The PHP projects don't upgrade because the hosts don't support new PHP versions. We cannot wait for them forever. There are enough 5.3 hosts to migrate ...
by igorw
Mon Feb 06, 2012 5:21 pm
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC|Merged] Require PHP 5.3
Replies: 67
Views: 81714

[RFC|Merged] Require PHP 5.3

phpBB 3.0 still supports PHP 4.3. phpBB 3.1 is supposed to support PHP 5.2. The problem is that PHP 5.2 has been end-of-life'd since July 22nd 2010. By the time we release 3.1, the version of PHP that it is targeting will have been dead for 2 years. This is unacceptable. At this point it just doesn'...
by igorw
Sun Feb 05, 2012 12:53 am
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC] More secure hashing
Replies: 64
Views: 61518

Re: [RFC] Update encryption standards

I think SHA-1 is completely supported in 4.3 and higher. I do see what you mean about 5.3 though since SHA-2 should be fully available for use. Sure, changing the hashing to use something else would be trivial. However, since we need to keep compatibility with existing hashes, it's not as trivial a...
by igorw
Sun Feb 05, 2012 12:35 am
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC] More secure hashing
Replies: 64
Views: 61518

Re: [RFC] Update encryption standards

phpass is based on md5, but uses multiple iterations and salting to make the hashes stronger. We cannot really upgrade to anything stronger before we require PHP 5.3. Starting with PHP 5.3.0, there is a guarantee that crypt() is available. 5.3.2 fixes a serious bug and adds support for more algorith...
by igorw
Sun Feb 05, 2012 12:26 am
Forum: [3.x][Archive] RFCs
Topic: [RFC] Remove phpBB 2 Convertor
Replies: 16
Views: 10501

Re: [RFC] Remove phpBB 2 Convertor

On the other side there is no reason to remove it if it is working. I don't agree with this sentiment. In general. We have so many parts that we need to maintain, which is part of why we are so slow. We should seriously consider removing some of this cruft. On topic: I don't think we need 2.0 => 3....
by igorw
Fri Feb 03, 2012 12:11 pm
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC|Merged] General Hook Architecture of phpBB3.1
Replies: 121
Views: 138638

Re: [RFC|Accepted] General Hook Architecture of phpBB3.1

Thank you. Everything is in feature/ledges-2? No PR for this?
by igorw
Thu Feb 02, 2012 12:33 pm
Forum: [3.1/Ascraeus] Merged RFCs
Topic: [RFC] New front pages in extensions
Replies: 12
Views: 15493

Re: [RFC] New front pages in extensions

I'm pro-front-controller. Having it just for extensions at first seems like a good idea. At some point we may want everything routed through one.
by igorw
Mon Jan 23, 2012 2:05 pm
Forum: [3.x] Discussion
Topic: Template inheritance extension
Replies: 7
Views: 5074

Re: Template inheritance extension

It has not been formally decided, but quite a few have voiced their support for using it in 3.2. And I would strongly support that too.
by igorw
Mon Jan 23, 2012 12:31 pm
Forum: [3.x] Discussion
Topic: Template inheritance extension
Replies: 7
Views: 5074

Re: Template inheritance extension

As has already been discussed previously, this could most likely be achieved through assetic.