- Status changed to Needs work
almost 2 years ago 10:05am 16 January 2023 - Status changed to Needs review
almost 2 years ago 2:16pm 16 January 2023 - π¦πΊAustralia mstrelan
Should we add this file to the
FilesMatch
directive in the default .htaccess and web.config files?# Protect files and directories from prying eyes. <FilesMatch "\.(engine|inc|install|make|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\.(?!well-known).*|Entries.*|Repository|Root|Tag|Template|composer\.(json|lock)|web\.config|yarn\.lock|package\.json)$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig|\.save)$">
There is also a PHP settings section in default.settings.php that may need to reference this new file. Possibly also need to review example.settings.local.php and ht.router.php
- π«π·France andypost
zend.assertions 1
more meaningful asassert.exception 0
by default - πͺπΈSpain tunic Madrid
#42, adding a rule to block serving ini files in web.config and .htaccess sounds reasonable in this case, but it means we'll block any ini file. While this is still reasonable, I'm not sire if this would be a breaking change. Should we discuss this here? Should we create a new issue? Should we just add that blocking rule here?
About example.settings.local.php, this is what is said there about assertions:
/** * Assertions. * * The Drupal project primarily uses runtime assertions to enforce the * expectations of the API by failing when incorrect calls are made by code * under development. * * @see http://php.net/assert * @see https://www.drupal.org/node/2492225 * * It is strongly recommended that you set zend.assertions=1 in the PHP.ini file * (It cannot be changed from .htaccess or runtime) on development machines and * to 0 or -1 in production. * * @see https://wiki.php.net/rfc/expectations */ assert_options(ASSERT_ACTIVE, TRUE); assert_options(ASSERT_EXCEPTION, TRUE);
Because zend.assertions can only be changed on runtime when its value is 0 I guess it's not needed to say anything here. See https://www.php.net/manual/en/ini.core.php#ini.zend.assertions for more information.
#43, as explained in the previous link, zend.assertions can be changed on runtime with some limitations (for example, if php.ini set it to -1 there's nothing you can do because assertion code is not even generated), so I guess we should stick to assert.exception because it can be changed on runtime.
So I guess we only need to decide if we block ini files or not to push this issue forward.
- π¦πΊAustralia mstrelan
adding a rule to block serving ini files in web.config and .htaccess sounds reasonable in this case, but it means we'll block any ini file
We already block web.config (not *.config), can't we use the same pattern to block this file?
- πͺπΈSpain tunic Madrid
We already block web.config (not *.config), can't we use the same pattern to block this file?
Yes, you are right, we can just block that file instead of using a wildcard.
- Status changed to Needs work
over 1 year ago 4:11pm 15 March 2023 - Status changed to Needs review
over 1 year ago 4:41pm 15 March 2023 - πͺπΈSpain tunic Madrid
Branch rebased, added .user.ini to web.config and .htaccess so they are not served, and test updated so this is tested.
- Status changed to Needs work
over 1 year ago 10:07pm 18 March 2023 The Needs Review Queue Bot β tested this issue. It fails the Drupal core commit checks. Therefore, this issue status is now "Needs work".
Apart from a re-roll or rebase, this issue may need more work to address feedback in the issue or MR comments. To progress an issue, incorporate this feedback as part of the process of updating the issue. This helps other contributors to know what is outstanding.
Consult the Drupal Contributor Guide β to find step-by-step guides for working with issues.
- Status changed to Needs review
over 1 year ago 10:43pm 18 March 2023 - Status changed to Needs work
over 1 year ago 1:30pm 22 April 2023 - π§πͺBelgium borisson_ Mechelen, π§πͺ
I think this change looks good now, the change record that was requested has been added. MR needs to be updated because it looks like it is not mergable.
- last update
over 1 year ago 29,302 pass - last update
over 1 year ago 30,257 pass, 2 fail - @tunic opened merge request.
- last update
over 1 year ago 30,257 pass, 2 fail - Status changed to Needs review
over 1 year ago 6:23pm 23 April 2023 - πͺπΈSpain tunic Madrid
I've created a new MR for 9.5.x: For this, I had to create a new commit including commits from 10.1.x. Not sure if this is the best way but O had some troubles cherry-picking the commits, I hope this is ok.
As said previously, I've closed the 9.2.x MR because that Drupal release is not maintained anymore.
- Status changed to Needs work
over 1 year ago 11:32pm 23 April 2023 - πΊπΈUnited States darren oh Lakeland, Florida
10.1.x branch looks good. The 9.5.x branch has trailing space in one of the web.config files and is missing a .user.ini test fixture. Once those errors are fixed, all tests should pass.
- π³πΏNew Zealand quietone
This is making changes to .htaccess let's have a release note snippet to add to the release notes.
- last update
over 1 year ago 30,322 pass - last update
over 1 year ago 29,302 pass - πͺπΈSpain tunic Madrid
#56 not sure about the release notes tag, it is just a way to locate all the issues for a release when writing the release note or do we need to write an actual release note? In that case, would be the linked change record enough?
- Status changed to Needs review
over 1 year ago 2:45pm 24 April 2023 - Status changed to RTBC
over 1 year ago 5:25pm 28 April 2023 - last update
over 1 year ago 30,322 pass - last update
over 1 year ago 30,322 pass - last update
over 1 year ago 29,366 pass - last update
over 1 year ago 29,359 pass, 2 fail - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Waiting for branch to pass - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Waiting for branch to pass - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7
1:11 1:11 Queueing - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.1 & MySQL 5.7last update
over 1 year ago Not currently mergeable. - last update
over 1 year ago 30,341 pass - last update
over 1 year ago 29,429 pass - last update
over 1 year ago 29,448 pass - πͺπΈSpain tunic Madrid
The MR at #61 (2463967-add-user.ini) has exactly the same changes as the on open at #27 (10.1.x), what is the reason to open it?
- last update
over 1 year ago 29,429 pass - last update
over 1 year ago 30,341 pass - πͺπΈSpain tunic Madrid
Well, comment in #62 is not true anymore because I've rebased the two initial merge requests. Anyway, if the last open is better for any reason we can close the other and rebase that one.
- πΊπΈUnited States darren oh Lakeland, Florida
I opened the last one for the 11.x branch. I wasn't able to change the target branch of the previous merge request.
- πͺπΈSpain tunic Madrid
Ops, I didn't see the destination of the merge, sorry. So we have 3 MR, one per release (9.x, 10.x and 11.x). Thanks!
- last update
over 1 year ago 29,450 pass - last update
over 1 year ago 29,499 pass - last update
over 1 year ago 29,499 pass, 1 fail - last update
over 1 year ago 29,506 pass - last update
over 1 year ago 29,551 pass - last update
over 1 year ago 29,553 pass - last update
over 1 year ago 29,559 pass - last update
over 1 year ago 29,567 pass - last update
over 1 year ago 29,571 pass - last update
over 1 year ago 29,801 pass - last update
over 1 year ago 29,797 pass - last update
over 1 year ago 29,802 pass - last update
over 1 year ago 29,802 pass - last update
over 1 year ago 29,808 pass - last update
over 1 year ago 29,812 pass - last update
over 1 year ago 29,815 pass - last update
over 1 year ago 29,815 pass - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Waiting for branch to pass - last update
over 1 year ago 29,873 pass - last update
over 1 year ago 29,877 pass - last update
over 1 year ago 29,871 pass, 1 fail - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8
15:41 15:41 Queueing - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
over 1 year ago Not currently mergeable. - Status changed to Needs work
over 1 year ago 8:26am 8 August 2023 - π³πΏNew Zealand quietone
I am doing triage on the core RTBC queue β .
The issue summary does not have a proposed resolution. That means the reviewer has no way to know that the changes in the MR are what has been agreed to. However, in this case it is pretty obvious from the first paragraph what this is doing. There are no remaining tasks either.
I skimmed through the comments and found that all questions (#30, #37) have been answered (#38), except one for me.
#56/#56. Changes to files such as .htacccess usually have an sentence or two in the Release notes to help the site owner know what they need to do. For example, see drupal 10.1.0-rc1 β in the 'Changes to site-owner managed files' section. It that sort of sentence that should be in the 'release note snippet' of the Issue Summary.
I then read the CR and think it needs work. I think it should have something to help readers know if they must or should change something on their site. Maybe even a before and after section.
@Darren Oh, there are instructions for rebasing on the same branch or a difference branch in the wiki. See https://www.drupal.org/docs/develop/git/using-gitlab-to-contribute-to-dr... β .
Adding some credit, but did not complete the process.
I considered leaving this RTBC for other committers to review but decided to set to NW to ensure that the CR and release note snippet was ready.
Oh, and not surprising, the diff for 11.x no longer applies, others wise I would have reviewed the comments.
- last update
over 1 year ago 29,958 pass - Status changed to Needs review
over 1 year ago 12:21am 9 August 2023 - πͺπΈSpain tunic Madrid
There is another issue: assert.active shouldn't be use:
assert.active bool
Enable assert() evaluation. zend.assertions should be used instead to control the behaviour of assert().See https://www.php.net/manual/en/info.configuration.php#ini.assert.active.
It seems we should then zend.assertions. However, in the Drupal wiki, page "Runtime Assertions" ( https://www.drupal.org/node/2492225 β ) the docs still says assert.active should be set to 1 (see https://www.drupal.org/node/2492225#s-configuring-your-servers β ).
I think first we need to agree on what to do with those two settings (assert.active and zend.assertions). I think Drupal should use the recommendation by PHP. Also, assert.active is deprecated on PHP 8.3 and "the zend_assertions INI setting has superseded it for a while", see https://wiki.php.net/rfc/assert-string-eval-cleanup.
But I'm not sure if this should be discussed here or in another issue.
From my point of view we should:
- - Update this patch to use zend.assertions
- - Update the linked documentation
- last update
over 1 year ago 29,958 pass - πΊπΈUnited States darren oh Lakeland, Florida
tunic, the scope of this issue is limited to making .user.ini files match .htaccess and web.config. Changes to the contents of those files should be discussed in a different issue.
- πͺπΈSpain tunic Madrid
Follow up added: β¨ Use zend.assertions PHP setting instead of assert.active Closed: duplicate .
- π«π·France andypost
@tunic there's pre-existing issue π Fix deprecated assert_options() function usage for PHP 8.3 Needs review it needs to do the same steps (even update docs) so follow-up #70 can be closed as duplicate and existing issue just needs polishing summary from β¨ Use zend.assertions PHP setting instead of assert.active Closed: duplicate
- Status changed to Needs work
about 1 year ago 8:04pm 28 August 2023 - πΊπΈUnited States smustgrave
Moving to NW for the change record updates requested per #66
- Status changed to Needs review
about 1 year ago 8:08pm 28 August 2023 - πΊπΈUnited States darren oh Lakeland, Florida
The requested change record updates have already been made.
- Status changed to RTBC
about 1 year ago 5:22pm 31 August 2023 - πΊπΈUnited States DamienMcKenna NH, USA
The requested change record updates have already been made, so removing the tag.
Bumping this to the 10.2.0 release notes tag as 10.1.0 is already out the door.
This looks super simple and straightforward. RTBC.
- last update
about 1 year ago 30,129 pass, 2 fail - last update
about 1 year ago 30,135 pass - last update
about 1 year ago 30,136 pass - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - πͺπΈSpain tunic Madrid
I rebased the branch and edit the MR to be merged into 10.2.x. No other changes done, so I guess is still RTBC.
- Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Status changed to Needs work
about 1 year ago 9:26am 2 November 2023 - π¬π§United Kingdom alexpott πͺπΊπ
The change record should be updated to tell people how to use the scaffold's replace or append operations to modify the core provided .user.ini. Using a patch to do this is unnecessary. See https://www.drupal.org/docs/develop/using-composer/using-drupals-compose... β
- π¬π§United Kingdom alexpott πͺπΊπ
The merge requests seem to be a little bit broken too.
- Status changed to Closed: won't fix
about 1 year ago 10:41am 2 November 2023 - πͺπΈSpain tunic Madrid
Given that π Remove mentions of assert.active from .htaccess Needs work is removing the only piece of code in
.htaccess
that is being copied to the.user.ini
in this issue, I guess this issue is now obsolete because the.user.ini
file will be completely empty.Therefore, I'm closing this as won't fix.
- Status changed to RTBC
about 1 year ago 1:25pm 2 November 2023 - Status changed to Needs work
about 1 year ago 1:28pm 2 November 2023 - πΊπΈUnited States darren oh Lakeland, Florida
That issue is for D11 and has not been committed. This is ready to go once the change record is updated.
- πΊπΈUnited States smustgrave
Just fyi 11.x is the βmainβ branch and D10 releases are tagged off it. So if that issue lands itβll be included in 10.2
- πͺπΈSpain tunic Madrid
If we include this in 10.2 what would happen in 11? Given that 11 removed the code in .htaccess that this issue copies to .user.ini then.user.ini in 11 would be blank file.
- Status changed to RTBC
about 1 year ago 5:03pm 2 November 2023 - πΊπΈUnited States darren oh Lakeland, Florida
Change record has been updated. Some of these changes are needed even if Drupal does not ship any PHP settings. Helping users who are not PHP experts find the right place to set PHP options is also valuable.
- last update
about 1 year ago 30,486 pass - last update
about 1 year ago 30,484 pass, 1 fail - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
about 1 year ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Status changed to Needs work
12 months ago 4:20pm 16 November 2023 - πΊπΈUnited States xjm
There are three merge requests in the summary. Two should be closed. I assume the ones labeled for 9.5.x and 10.1.x are wrong, but the comments above and changes to the target branch make me unsure. Please close the incorrect merge requests, or document which should be closed in an issue comment and under an independent header in the IS. Thanks!
- Status changed to Needs review
12 months ago 5:16pm 16 November 2023 - Status changed to RTBC
12 months ago 5:44pm 16 November 2023 - last update
12 months ago 30,602 pass - last update
12 months ago 30,604 pass - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
12 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
11 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
11 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
11 months ago Not currently mergeable. - Open on Drupal.org βEnvironment: PHP 8.2 & MySQL 8last update
11 months ago Not currently mergeable. - last update
11 months ago 30,724 pass - Status changed to Fixed
11 months ago 8:22am 16 December 2023 - π¬π§United Kingdom alexpott πͺπΊπ
Committed de1a11e and pushed to 11.x. Thanks!
diff --git a/.user.ini b/.user.ini index 598176ba2f..95d89560ff 100644 --- a/.user.ini +++ b/.user.ini @@ -4,7 +4,7 @@ ; at runtime. ; ; PHP only reads settings from this file if it is running as a CGI script. If -; PHP is running as an Apache module, see .htaccess. +; PHP is running as an Apache module, see .htaccess. ; Disable PHP assertions. assert.active = 0 diff --git a/composer.lock b/composer.lock index 15d5a5ed79..e239adab8e 100644 --- a/composer.lock +++ b/composer.lock @@ -9634,5 +9634,5 @@ "platform-overrides": { "php": "8.1.0" }, - "plugin-api-version": "2.3.0" + "plugin-api-version": "2.6.0" } diff --git a/core/assets/scaffold/files/user.ini b/core/assets/scaffold/files/user.ini index 598176ba2f..95d89560ff 100644 --- a/core/assets/scaffold/files/user.ini +++ b/core/assets/scaffold/files/user.ini @@ -4,7 +4,7 @@ ; at runtime. ; ; PHP only reads settings from this file if it is running as a CGI script. If -; PHP is running as an Apache module, see .htaccess. +; PHP is running as an Apache module, see .htaccess. ; Disable PHP assertions. assert.active = 0
Made the above fixes on commit.
- π«π·France andypost
Looks it was not pushed and assert will throw deprecation on PHP 8.3 https://www.php.net/manual/en/info.configuration.php#ini.assert.active
- Status changed to Needs work
11 months ago 5:02pm 16 December 2023 - π¬π§United Kingdom longwave UK
Thanks for pointing that out @andypost. NW for #94.
-
alexpott β
committed de1a11ea on 11.x
Issue #2463967 by Darren Oh, tunic, andypost, alexpott, quietone,...
-
alexpott β
committed de1a11ea on 11.x
-
alexpott β
committed 77af6906 on 11.x
Revert "Issue #2463967 by Darren Oh, tunic, andypost, alexpott, quietone...
-
alexpott β
committed 77af6906 on 11.x
- π¬π§United Kingdom alexpott πͺπΊπ
@andypost why doesn't our htaccess trigger deprecations then?
- π¬π§United Kingdom alexpott πͺπΊπ
So π Remove mentions of assert.active from .htaccess Needs work is the issue to remove that - I think that once that one lands we could actaully close this as won't fix as user.ini will be empty.
- π«π·France andypost
I bet this deprecation is going to apache logs so invisible
- Status changed to RTBC
11 months ago 2:53am 22 December 2023 - πΊπΈUnited States darren oh Lakeland, Florida
The deprecation notice is out of scope for this issue. This issue should not be closed even if .user.ini is empty. It provides important documentation for users. Those of you who are PHP experts may not be able appreciate how many hundreds of hours have been lost because we have avoided implementing this for so many years. If you think everyone knows when they need to use .user.ini, just look at the history of this issue. Our reluctance to move this issue forward has hindered Drupal adoption for no good reason.
- last update
11 months ago 25,891 pass, 1,824 fail - Status changed to Needs review
11 months ago 6:57am 22 December 2023 - π«π·France andypost
I still see no reason to make a common practice reading 2 config files per each request for Apache.
Moreover composer overrides allow to append core's default
.htaccess
or replace it - that's documentation which needs improvement instead of performance regression - πͺπΈSpain tunic Madrid
#102, as said in the issue's body the two files are not processed in the same request because user.ini is only processed when CGI/FastCGI SAPI is used and .htaccess is only processed when PHP run as Apache module. Unless this information is wrong there should not be a performance penalty for having both files and both are needed to be able to configure both ways of using PHP (although user.ini will be currently empty).
- πΊπΈUnited States darren oh Lakeland, Florida
Changed the title to account for the possibility that PHP settings might be empty by the time this is committed.
- π¦πΊAustralia larowlan π¦πΊπ.au GMT+10
I'm confused here, there's a commit showing in December from @alexpott with the same diff as the MR - so what's the status of this issue - is it only needs review for the release note?
- Status changed to RTBC
8 months ago 9:17pm 25 March 2024 - πΊπΈUnited States darren oh Lakeland, Florida
It was set back to Needs Review due to a question that was answered.
- π¬π§United Kingdom catch
Didn't https://git.drupalcode.org/project/drupal/-/commit/77af69069979b46f2b5df... revert this?
Given π Remove mentions of assert.active from .htaccess Needs work I think this should be won't fix.
- πΊπΈUnited States darren oh Lakeland, Florida
Even after the deprecated assert.active directive is fixed, having a user.ini that matches .htaccess is necessary documentation even for advanced PHP users, as the discussion in this issue has demonstrated.
- Status changed to Needs work
8 months ago 11:32pm 25 March 2024 - π¬π§United Kingdom alexpott πͺπΊπ
I'm pretty certain we can remove the changes to web.config and .htaccess from this merge request - they are not necessary - which makes this change much easier to land. Leave the changes to HtAccessTest in and you'll see that access to .user.ini is still blocked.
- πΊπΈUnited States xjm
Untagging, since this did not land in time for 10.3.