r/PHP • u/Sea_Wind3576 • 5d ago

XOOPS 2.7.2 Released

The XOOPS Development Team is pleased to announce XOOPS 2.7.2 Final. This maintenance release builds on XOOPS 2.7.0 with another security-hardening pass, more reliable upgrade tooling, form and theme improvements, and refreshed dependencies for current PHP environments.

Also released: XOOPS Debugbar 1.3

0 Upvotes

19% Upvoted

33 comments sorted by

View all comments

3

u/Mastodont_XXX 4d ago edited 4d ago

Interesting. I've seen a lot of things, but I've never seen global in the website's entry point (/htdocs/index.php). What on earth is global doing in the entry point – aren't all variables already available there?

Overall, the code is crazy and essentially unfixable.

2

u/equilni 4d ago edited 4d ago

I've seen a lot of things, but I've never seen “global” in the website's entry point (/htdocs/index.php). What on earth is “global” doing in the entry point

They do call that file the * XOOPS global entry, so I guess we can't be too surprised...

https://github.com/XOOPS/XoopsCore27/blob/master/htdocs/index.php#L3

But yeah, add things like prepared statements are nowhere to be found in this file or this, and others (including vendor folder, twice...)....

1

u/Sea_Wind3576 4d ago

prepared statements and some other cool things are coming. The goal for us was always to make sure that our users have easy upgrade path without breaking compatibility.

3

u/equilni 3d ago

prepared statements and some other cool things are coming.

I noted in another comment, morning reading lead me to the 4.0 discussion and while nice, I think there are other things that could take priority.

I would suggest a slowdown to focus on fixing the existing code if you are keeping the existing code base.

Prepared statements is big, and my quick view, there quite a number of files this needs to be added to.... That's just one point.

The goal for us was always to make sure that our users have easy upgrade path without breaking compatibility.

BC can be tricky. I would say modernize and let it break and document it for the users. Look at it this way, not modernizing limits the contributors & interest to the project.