Everything
php
yohgaki
Contributor Directory
RFCs
Language and policy proposals from this contributor
RFCs are part of the process by which decisions are made about PHP. For more information about the RFC
process as well as viewing a full list of RFCs please visit the RFC section.
Precise Session Management
This proposal fixes session management design issue. Session ID management requires more precise management. Otherwise,
Precise Session Data Management
Yes
15 Votes (58%)
No
11 Votes (42%)
Use php_mt_rand() instead of php_rand()
Both php_rand() and php_mt_rand() internal function provides pseudo random numbers. php_rand() uses system random function which has less randomness compare to ...
Semi-Automatic CSRF Protection
CSRF (Cross Site Request Forgery) has been major vulnerability for PHP applications. CSRF protection is not difficult to implement especially with good web appl...
Inconsistent behaviors to discuss/document
There are number of in comparison and conversion inconsistencies.
Secure serialization by authentication code
PHP variable serialization was source of security issues. The root cause of issues is crafted serialized data. Crafted serialized data can be rejected by messag...
Escaping RFC for PHP Core
This RFC proposes the addition of an SPL class (and optionally a set of functions) dedicated to the secure escaping of untrusted values against Cross-Site Scrip...