Everything
php
Inactive
RFC Categories
OPcache Static Cache
This RFC proposes OPcache Static Cache: an OPcache-managed shared-memory cache for explicit userland values and selected PHP static state.
foreach iteration of keys without values
When iterating with foreach, it is not possible to retrieve only the keys (and not also the values) without unnecessary extra work or semantic overhead. This RF...
Grouped ValueError Conversions for PHP 8.6
Many PHP internal functions currently return false when invalid argument values are passed. Modern PHP prefers throwing ValueError for invalid inputs.
Add PDO disconnect() and isConnected()
Adds PDO::disconnect() to disconnect from an established database connection and PDO::isConnected() to query connection status.
Add OOP methods to Curl objects
As part of the Resource to object conversion project,
the cURL resource types were converted to objects with the release of PHP 8.0 . Currently, those objects
...
#[NotSerializable]
Some classes aren't supposed to be serialized. Currently, while PHP internal classes have a nice way of preventing being serialized/unserialized, userspace does...
Harmonise "untyped" and "typed" properties
This RFC proposes to remove or at least minimise the distinction between typed and untyped properties, by treating any property with no type information as thou...
Remove disable_classes INI setting
The disable_classes INI setting is fundamentally useless and causes various issues in the engine, as using it will result in unexpected states for the engine to...
Closure self reference
Currently, the main way used to call a closure from within that closure, is to bind a variable by reference into the closure, when the closure is created.
Introduce array_group and array_group_pair grouping functions
We consider the grouping of elements within an array a very basic and common functionality.
Implicit Move Optimisation
PHP currently contains two data types which are copy-on-write (CoW): string and arrays. When you pass a variable containing a CoW type as an argument to a funct...
NameOf
During PHP execution, it is possible to reflect on most of the code currently running. For example, it is easy to get the name of a class and using reflection u...
Property Capture for Anonymous Classes
This RFC proposes the addition of an inline syntax for lexical (captured) variables when declaring anonymous classes in PHP. The goal is to simplify anonymous c...
Allow Closures to Declare Interfaces they Implement
This RFC proposes the addition of a syntax that allows closures to declare one or more interfaces they implement. This would provide developers with a more expl...
Allow casting closures into single-method interface implementations
This RFC proposes a new method for the Closure class called castTo(). This method would allow developers to create an instance of a class that implements a spec...
Structural Typing for Closures
This RFC proposes to introduce structural typing for closures when used with interfaces containing only an __invoke() method. This feature aims to simplify the ...
New core autoloading mechanism with support for function autoloading
PHP has had support for class autoloading since PHP 5 and it is an extremely useful feature that is relied on to only load classes that are being used within th...
Types for Local Variables
During the last releases of the language the support for types is increasing. We can already add types in a lot of contexts:
Miscellaneous Variable Functions
In general, PHP userland is not very good at or at least not consistent at exposing/accessing Zend engine internals. This occurs both at the userland function ...
is_valid_utf8()
UTF-8 is the most popular character set encoding globally on the web. Approximately 95% of all websites use it. PHP powers approximately 77.4% of the dynamic ...
2D Matrix Operations
PHP has traditionally been weak in the area of mathematics and math operations beyond what the baseline C library supplies. With the growth of machine learning...
gd imageexportpixels() and imageimportpixels()
When working with larger images in gd, exporting and importing pixels one pixel/color at a time with imagecolorat() and imagesetpixel() creates a lot of functio...
Access Scope from Magic Accessors
When using magic methods to access actual properties, respecting their declared visibility is often desired. Yet, accessing the calling scope to emulate the vis...
Working With Substrings
Zend engine has the policy of performing copy-on-write for every string operation. This means that memory is regularly allocated and deallocated and strings ar...
Add file_descriptor() function
When dealing with I/O in PHP, one deals with streams as an abstraction over the file system. This abstraction is convenient in giving a uniform interface withou...
Random migration
While random number generation in PHP has been improved by a series of Random Extension RFCs, the old insecure methods remain, and need to be migrated to a more...
Unicode Text Processing
This RFC suggests to introduce a new class to make using and processing
(Unicode) text significantly more developer friendly compared to the
wealth of functiona...
List\unique() and Assoc\unique()
The array_unique() function allows getting all unique values of a given array. Unfortunately, PHP has multiple
definitions of equality and thus uniqueness. The ...
Add SameSite cookie attribute parameter
The support for the SameSite cookie attribute has been added in PHP 7.3.
However, it can only be set by passing an array of options with the samesite key define...
Clone with
With the advent of standards promoting quasi-immutable objects, like PSR-7, wither methods became increasingly widely used. This practice is the de facto standa...
Add an optional parameter $result_code to shell_exec()
The shell_exec() function is used to execute an external program and grab its entire output as a string, but it lacks a way to capture the exit code of the laun...
final class Collections\Deque
While SplDoublyLinkedList and its subclass SplQueue/SplStack exist in the SPL, they have several drawbacks (that are addressed by this RFC to add a Deque class)...
final class Vector
PHP's native array type is rare among programming language in that it is used as an associative map of values, but also needs to support lists of values.
In ord...
Sorting Enum
This RFC proposes to add a built-in Enumeration to PHP to specify the possible return values of sorting/comparison functions. This enumeration would be easier ...
Default User-Agent for cURL
PHP has a user_agent php.ini entry for decades, which can be set as a default value. But it is considered for stream based operations like file_get_contents. Th...
Deprecate boolean to string coercion
PHP is a dynamically typed language and as such implicit type coercion naturally arises, most of these are harmless and rather convenient. However, the conversi...
Iterator chaining
SPL provides a set of iterators that allow feeding one into another to create powerful data pipelines, however doing that is not particularly convenient:
Autoload Classmap
Currently, autoloading requires invoking a userland function that is then responsible for performing its own logic to determine the class location on disk, and ...
Add PDO function: mysqlGetWarningCount
Knowing if a query you ran generated warnings in your database is very important. MySQL warns about values getting truncated, inserting nulls into not-null colu...
Add PDO function: mysqlGetWarningCount
Yes
3 Votes (18%)
No
14 Votes (82%)
Concepts to improve mysqli extension
As we all know mysqli was created as a replacement for the old mysql_* API. The core improvements over the old API were: support for prepared statements, object...
Short match
The match() expression, introduced in PHP 8.0, matches one value against a series of others. For more complex cases, it's possible to provide a value of boolea...
Tagged Unions
This RFC expands on the previous Enumerations RFC to allow values to be associated with an enum Case, creating what is typically called a tagged union.
Algebraic Data Types
This is an over-arching description of a multi-step process to add Algebraic Data Types to PHP. That effort is happening over multiple implementation RFCs in o...
Named Parameters explicit opt in
The current implementation of named parameters breaks object polymorphism.
Objects can be declared falsifiable
This RFC introduces a new interface Falsifiable and magic method __toBool() allowing custom objects (types) to define and declare themselves true or false. Give...
Change terminology to ExcludeList
The word blacklist require additional context to figure out the exact intention of a specific
configuration. This proposal suggest to change this to a name that...
Conditional Return, Break, and Continue Statements
Most generally, this is a syntactical change that (IMO, of course) allows for a terser and more expressive way to achieve conditional returns (along with breaks...
Unbundle unmaintained extensions in PHP 8
The RFC proposes to unbundle or assign the PHP Project as a maintainer for the listed extension in PHP 8 following the Cleaning up unmaintained extensions RFC.
Type declarations in array destructuring expressions
Adds the possibility to extend values with type declarations while using array or list destructuring expressions.
Change var_export() array syntax to use shorthand arrays
This RFC proposes to change var_export()'s array syntax to use the new short-hand arrays first introduced in PHP 5.4. The old array() construct is a kludge and ...
Variable declarations before usage
To allow for more strictness and type safety if a user wishes to have it, we need a way to make variable declarations explicit. When enabled, accessing an undec...
Prevent disruptions of conversations
The internals email mailing list is the main tool that is used to coordinate work on the PHP project.
__toArray()
This RFC proposes to add a new magic method called __toArray() to allow a class to control how it is represented when converted to an array.
Normalize arrays' "auto-increment" value on copy on write
If two arrays are equal/identical, they should remain equal/identical arrays after
the same array_push(..., $val) call is executed on both of them:
Alternative "use" syntax for Closures
PHP users often say that they find defining the lexical-scope imports cumbersome, because
they hate importing the variables explicitly.
Nullable Casting
PHP supports expression casting to primitive type (like int) by using ( type ) expression, but it currently doesn't allow to use a nullable type as introduced b...
Generator comprehensions
This RFC proposes a new syntax for compact generator creation, or comprehensions as they are known in many other languages. Such a syntax offers a more compact...
Allow void return type variance
This RFC proposes to change in part void 's behavior in class methods; the current behavior is causing more annoyance than benefit and is probably too restricti...
Namespace Visiblity for Class, Interface and Trait
Namespace visibility modifiers, in one shape or another (or by other names), have been a topic of discussion in the PHP community for more than a decade (ever s...
Session strict mode default ini settings
Changing default setting session.use_strict_mode to use strict mode sessions by default preventing session fixation by session adoption.
PHP RFC - Deprecate backtick operator
The backtick operator (`dir D:\foo`) is used to execute commands via shell.
Scalar Pseudo-type
Some procedures are capable of accepting or returning any type of the ones that are considered scalar. PHP does not have support for union types and the only wa...
Deprecate Inconsistent Cast Names
Scalar type declarations use only a single name for each numeric type, but casts permit some variation. This RFC proposes to deprecate the variants that are not...
Allow explicit call-site pass-by-reference annotation
By-reference parameters are currently only declared when defining a function, while the call-site does not distinguish between by-value and by-reference passing...
Fiber
Fibers are primitives for implementing light weight cooperative concurrency in PHP. Basically they are a means of creating Closure that can be paused and resume...
Add support for stream-wrapped URLs in opcode cache
This RFC proposes a way to opcode-cache the PHP code generated via a stream wrapper.
Deprecate uniqid()
uniqid(), against all expectations from the name, doesn't produce unique IDs. While there is a sleep() to prevent multiple duplicate IDs in the same process, th...
Deprecate PDO::PARAM_NULL
PDO defines a NULL type, but this concept is not part of the SQL standard. Types are nullable, but there is no type that can only have that value.
Enable strict_types checking for curl_setopt()
PHP 7.0 introduced strict type checking as part of the scalar types RFC. When enabled, PHP will use strict type-checking mode for function calls and return sta...
PHP RFC - Deprecation of fallback to root scope
Fallback to global scope allows namespaces to access in an unqualified manner symbols actually residing in the root namespace.
Improve predictable PRNG random and RNG API
Current predictable PRNG, i.e. mt_rand() and rand(), produces very weak random values even produces non random values.
Remove requirement for authority portion of user stream wrapper URIs
According to RFC 2396 defining URI Generic Syntax which specifies URI Syntactic Components:
Disallow Multiple Constructor Calls
Disallow multiple calls to an objects constructor to ensure that the encapsulated data cannot be mutated even if an object is meant to be immutable. The goal is...
Chaining Comparison
This RFC proposes a syntax change to allow arbitrary chaining together of comparison and equality operations [==, !=, !==, ===, =]. The initial request that sp...
SoapClient __getLocation
Currently setLocation() returns old location when called, but if new one is not provided it will unset location property.Adding a getLocation is a practical way...
Distrust SHA-1 Certificates
As of 2016-01-01, the CA/B Forum forbids issuing new SHA-1 certificates. The CA/B has advised CAs starting 2015-01-16 to issue no SHA-1 certificates with an exp...
Create RFC Compliant URL Parser
This RFC came about for an attempt to resolve Bug #72811. In the attempt, discussion shifted from trying to patch the current implementation of parse_url() to ...
Comparator interface
The internal DateTime and ImmutableDateTime classes have an internal compare_objects() method, which allows them to be directly compared with the usual comparis...
Namespace-scoped declares
PHP 7 introduced the strict_types declare directive, which controls how scalar type declarations behave in a certain file. A common complaint is that this direc...
Deprecate Bundling PEAR/PECL & Replace with composer/pickle
As the community moves on from PEAR and migrates to composer, the inclusion of PEAR in the PHP package is starting to make less and less sense.
Retry functionality
The retry keyword will make it easier to re-execute code blocks that failed due to recoverable errors by jumping to the top of the try block.
Throw Exception on Attempt of Constant Redefinition
PHP allows multiple statements that define the same constant, they are executed at run-tinw and only the first one actually define the constant value. Others ju...
Simple Annotations
This RFC proposes the introduction of simple value annotations - arbitrary values attached to classes and class members as meta-data, obtainable via reflection.
Semi-Automatic CSRF Protection
CSRF (Cross Site Request Forgery) has been major vulnerability for PHP applications. CSRF protection is not difficult to implement especially with good web appl...
Pipe Operator
A common PHP OOP pattern is the use of method chaining, or what is also known as Fluent Expressions. So named for the way one method flows into the next to form...
Lexical Scope Support for Anonymous Classes
Anonymous classes are cumbersome to use because they lack support for lexical scope [use()].
Add support for Sourcemaps
This RFC proposes adding support for Source Map Revision 3.
Typesafe callable
Currently, when you typehint against callable in your method signatures, you can never be certain whether it accepts the parameters you are giving it or if the ...
Short ternary Assignment Operator
Most binary expressions in PHP (e.g. `$x = $y op $z;`) have a shorthand form for self assignment (where the lefthand of the binary op is the same as the lefthan...
Callable Constructors
Currently in PHP, the constructor methods of classes can only be directly invoked through the language construct of 'new', they cannot be called as a callable v...
Traits with interfaces
Allow traits to implement interfaces. Classes that insert the trait would then implement the interface, as though it was declared on the class.
Adopt Code Of Conduct
This RFC proposes that the PHP project should adopt a formal code of conduct for its members.
Generic Types and Functions
This RFC proposes the addition of generic types and functions to PHP.
token_get_all() flag to return consistent elements
token_get_all() returns an array of tokens where each token element is either a single-character (for single-character tokens), or an array describing the token...
Secure serialization by authentication code
PHP variable serialization was source of security issues. The root cause of issues is crafted serialized data. Crafted serialized data can be rejected by messag...
Resource typehint
So far, every PHP type is supported by both parameter typehints and return types, except resources. This RFC should close this gap.
Default Value in List Assignment Syntax
We could destruct variables from an array with list constuct, it may be nested or a simple array. But there is no guarantee that the array can fulfill all vari...
Static Class Constructor
Objects are stateful by the state of all of their non-static and static properties. The same is for classes themselve for being stateful by the state of all of ...
Introduce Type Affinity
PHP is weakly typed to make it work with Web smoothly. However, precise data type usage is more an more important in these days. Weakly typed does not mean type...
Consistent Function Names
First of all, this RFC will not remove any old function names. This RFC only proposes renaming offending function names and have aliases for old names. Old name...
Introduce Design by Contract
Design by Contract(DbC) or Contract Programming is new way of program development that many languages support.
Precise URL include control
When allow_url_include was introduced, it was good enough protection against remote script inclusion. However, it causes problem for local script inclusion prot...
Type parsing modifications
This RFC proposes changes in the ruleset used to filter
and convert input arguments to internal functions.
Parser Extension API
This RFC proposes an introduction of userland parser extensions API for providing an access to the low-level Abstract Syntax Tree (AST) parser.
Native DbC support as definition
The D manual contains the following succinct definition of contracts:
Implementing Design by Contract
For more than 10 years (since PHP 5 was released), the PHP core community has
seen a lot of discussions about strict vs loose typing, type hinting and
related f...
Deprecate INI set/get aliases
There are number of INI set/get functions. This RFC proposes deprecation of these functions.
Make the PHP core case-sensitive
This RFC is about making the PHP core case-sensitive.
GitHub Pull Requests Triage Team
PHPs GitHub repository has over 180 open pull requests. Many of these are bug fixes or new tests that should be incorporated into PHP, but have not been because...
Support linking in stream wrappers
This RFC suggests adding support for links in stream wrappers by adding appropriate hooks.
Binary String Comparison
In PHP on comparing two strings in non-strict mode both operands will be casted to numbers and if it succeed both numbers will be compared instead of a binary s...
Abstract syntax tree
This RFC proposes the introduction of an Abstract Syntax Tree (AST) as an intermediary structure in our compilation process. This replaces the existing practice...
Use AST implementation in PHP 7?
Yes
47 Votes (100%)
No
0 Votes (0%)
Add typehint accessors to ReflectionParameter
This RFC proposes improvements to the way we handle type information in reflection. This work will make it easier for writing tools that convert type informatio...
Normalize string bitwise shifts
This RFC proposes that the behaviour of bitwise shift operations on strings be altered to match the behaviour of bitwise shifts on integers.
Unify crypt source INI settings
Crypt source such as /dev/urandom is mandatory for secure programs. None the less, PHP does not have way to specify crypt source as a core. This RFC proposes 2 ...
Build OpenSSL Module by Default
Security matters almost all applications. PHP needs ability to handle cryptography by default.
Module API Inspection
Was asked at PHPBenelux about being able to tell what PHP version a given module is loadable in (given only the .so). Since the answer came down to Try it and ...
Use alias to provide both legacy and consistent names
PHP has been developed about 20 years. Many legacy functions/methods do not comply CODING_STANDARDS Naming Conventions.
Inconsistent behaviors to discuss/document
There are number of in comparison and conversion inconsistencies.
GMP Floating Point Support
@yohgaki suggested adding support for libgmp's arbitrary precision floating point numbers to the PHP extension, and I offered to implement it, so here's my prop...
Your Title Here
GMP arithmetic with normal operator is added by
https://wiki.php.net/rfc/operator_overloading_gmp
Normalize increment and decrement operators
The current behaviour of increment and decrement operators is not very intuitive:
Isset/Set Operator
Two new operators. ?= for setting the value of an unset or falsey variable. And ??: which acts like ?: except it it also checks is set.
Named Arguments
Named arguments allow passing arguments to a function based on the parameter name, rather than the parameter position. This makes the meaning of the argument se...
Add named argument support?
Yes
57 Votes (76%)
No
18 Votes (24%)
Internal Serialize API
This RFC proposes a new API for internal object serialization and unserialization.
unset(): return bool if the variable has existed
The purpose of this RFC is to make unset return something meaningful. People also shouldn't have to wonder why they can't use unset if it isn't as a standalone ...
Site voting poll
This RFC talks about integration of voting polls into PHP.net in order to get a feedback from PHP users on RFCs or other topics from things like expectations fr...
systemd socket activation support for PHP-FPM
Linux distributions with systemd support a socket activation feature that allows systemd to listen on the socket from early in the boot process and start the se...
Escaping RFC for PHP Core
This RFC proposes the addition of an SPL class (and optionally a set of functions) dedicated to the secure escaping of untrusted values against Cross-Site Scrip...
Moving to an AST-based parsing/compilation process (obsolete)
Note: This RFC has been superseded by another Abstract Syntax Tree RFC.
DateTime::__toString
The purpose behind this RFC is to introduce converting the DateTime object to a string representation. This is a commonly requested feature in bug reports (the ...
array_delete() for elements deletion
This RFC proposes the addition of a set of two new functions that simplify working with arrays containing a set of unique values or objects that do not have any...
Loop+Else control structure
Performing a set of actions upon *not* entering a loop is a very common programming necessity. This RFC proposes an optional else clause that can be used after ...
Named Parameters (obsolete)
Note: This RFC has been superseded by another Named Parameters RFC.
Continuous Integration via Jenkins
The purpose of this RFC is to introduce the idea of using Jenkins for Continuous Integration in the PHP project supported with a Proof of concept implementation...
Prototype checks
Past discussions on the mailing lists have shed some light on the various ways we handle prototype checks and what may be done to improve PHP in that area.
This...
Line Markers in PHP
Currently, anything which generates PHP from other input files of any kind must cope with the line numbers and file names in the resulting PHP file being potent...
Function autoloading through spl_autoload*
The topic of supporting function autoloading was brought up many times in the past, this RFC introduces a potential implementation which would be consistent wit...
Add grisu3 strtod algorithm to PHP
Converting strings to doubles is a common problem in applications. The current standard in solving this problem
is David Gays strtod algorithm. This algorithm i...
CLI options for strict and quiet modes
This RFC seeks to add options to the CLI SAPI that would enable all and no error display.
Annotations in DocBlock
Many languages currently support metadata information. This RFC exposes an idea about how can it be implemented in PHP, providing a powerful tool that many appl...
RFC __autodefine
This proposal proposes to introduce the ability for automagically defining missing definitions at run time.
The reader should have a reasonable level of PHP kno...
Making T_FUNCTION optional for method declarations
The purpose of this RFC is proposing to remove the requirement of T_FUNCTION keyword in method declarations if a visibility flag (T_PUBLIC,T_PROTECTED, T_PRIVAT...
Comparable
Many other languages offer the ability to provide a method on a class which will be used when instances of that class are compared via comparison or equality op...
Error formatting optimizations
Every error in PHP is formatting in a sprintf()-alike syntax using one of our many error handling functions, every time an error, warning or notice occurs, we h...
Autoboxing
Autoboxing is a language feature that enables just-in-time conversion of a value object to another kind that is suitable to the context where it happens. In ge...
Getting a random string
The purpose of this feature is to create the most random number/string possible, and have it work on every system. The API is still undetermined.
Drop sql.safe_mode php.ini setting
sql.safe_mode is a very old feature of PHP, not really maintained and barely understood. The documentation claims on http://php.net/manual/en/ini.core.php#ini.s...
Jsonable interface
The current state of JSON support in PHP deals with all scalar types smoothly. However, complex data structures cannot be handled by PHP API.
This proposal want...
Enhanced Error Handling
php_error(), zend_throw_exception(), the @-operator... PHP and/or the Zend Engine respectively offer a variety of error issuance and handling mechanisms. There ...
Exceptions instead of Errors
Exceptions are a proper way of handling errors and are used in many other languages exclusivley.
Removal of the Zend API
Currently, PHP's interpreter, the Zend Engine, provides access to its internals via the Zend API. This RFC provides a rationale for this access, by removing the...
Better benchmarks for PHP
PHP's current bench.php is a micro-benchmark which tests a number of language features. Since it does not behave like a 'real' application, it cannot provide me...
Class casting to scalar
Currently the Zend Engine provides some magic to methods in classes with defined names, for example __toString() is called when someone attempts to cast a class...
Improve consistency of protected member lookups
This RFC proposes to eliminate an inconsistency in the way protected class members are resolved.
Static classes for PHP
Static classes are a well known construct for utility classes or stateless abstraction. C# for example has an class System.Environment to access command line op...
docBlock Parser
The purpose of this RFC is to propose adding functionality to Reflection which will augment Reflection::getDocComment() with a new function that will parse the ...
PDO version 1 improvements
PDO is a thin layer above native RDBMS interfaces. As such its focused on providing a unified API on the PHP level without getting too much into SQL abstraction...
LiteralString
Add LiteralString type, and is_literal_string(), to distinguish strings from a trusted developer, from strings that may be attacker controlled.
Improved Error Callback Mechanism
There are several extensions that replaces the internal PHP error callback (zend_error_cb, initially set to php_error_cb), either to customize one of the behavi...
improved_error_callback
Yes
14 Votes (88%)
No
2 Votes (13%)
Platform and extension-independent API to the system CSPRNG
Some applications require cryptographically secure random data to perform security functions. This RFC proposes a solution to the PHP programmer's difficulties ...
Add cyclic string replacements
This RFC improves the str_replace() and str_ireplace() functions.
Your Title Here
In PHP 7.0, the assert statement received some enhancements. Notably, it added the ability to throw exceptions on failures (but off by ini default) and the code...
On-demand Name Mangling
PHP marshals external key-value pairs into super-globals by mangling some disallowed characters to underscores:
password_hash() function behavior
password_hash() is introduced from PHP 5.5 as crypt() wrapper and has Blowfish(PASSWORD_BCRYPT) hash algorithm as the only hash function available.
Secure Session Module Options/Internal by Default
HTTP session management is core of Web security. Current default of session module options are weaker than it could be. Secure values by default would be better...
Add a Logical Shift Operator For Strings
This RFC is to discuss the addition of 2 new operators to the core, a logical left shift and a logical right shift.
Unknown RFC
Currently, the Zend Engine exposes several methods to PECL extensions and internal classes to control how internal objects behave when casting to primitives. T...
Unknown RFC
Weak references is an established concept in many existing object oriented languages such as Java, C#, Python and Lisp, and has been so for many years. [1] A we...
Taint support for PHP
This is a preliminary implementation of support for tainted variables in PHP. The goal is to help PHP application programmers find and eliminate opportunities f...
ABANDONED
The purpose of this RFC is to provide a way to support source files that do not begin with
Improve uniqid() uniqueness
uniqid() is supposed to create unique ID based on time. Current implementation does not make
sure uniqueness of result because it relies on system time.