Re: [PHP-DEV] CVS Account Request From: Jason Greene (usrgre-php <email protected>)
Date: 11/15/00

Wow, did that start a thread. Perhaps the problem could be easily handled by spliting the form up, and maybee changing its name
to "Contribute Code to PHP - CVS Account."

Have there been many problems with commits that break the tree?
I don't know how everyone else feels, but I always think things over about 3 times before I hit "commit"
on any development tree.

-Jason

----- Original Message -----
From: "Zeev Suraski" <zeev <email protected>>
To: "Sterling Hughes" <Sterling.Hughes <email protected>>
Cc: "Zak Greant" <zak <email protected>>; "Rasmus Lerdorf" <rasmus <email protected>>; "Jason Greene" <jason <email protected>>;
<php-dev <email protected>>
Sent: Wednesday, November 15, 2000 1:19 PM
Subject: Re: [PHP-DEV] CVS Account Request

> At 23:08 15/11/2000, Sterling Hughes wrote:
>
> >Also I think we should be a little more careful of who we give cvs access
> >to on the code root. Right now I could probably get a fake e-mail and
> >such from yahoo and obtain a nice ol' cvs account, from which I could then
> >(if I was bad) commit some harmful code, which since it would not be a
> >part of standard/ or main/ would not be given due attention (especially if
> >it was a nice harmful one line bit) and then hurt users who use it.
>
> I can't tell you how I'm happy I am you say that. I was beginning to think
> I was being paranoid, but I think that considering the popularity of PHP,
> someone joining the dev team as a silent 'trojan horse' isn't unlikely at all.
>
>
> > Now while one of the reasons many people contribute to PHP is because
> > it is so easy to get involved with the development, really most of the
> > commits are only made by a handful of people (PHP Group and a 10-20
> > others, if even). Most of the users could simply send patches. Patches
> > make sure the code is qa'ed, and then, if the patches are approved (by a
> > committer) then they would be committed, after a while if the user is
> > someone who is constantly sending (good) patches he would then obtain a
> > cvs account to commit to the code repository (documentation could be
> > given less security).
>
>
> Sounds interesting, albeit a bit difficult to implement
>
> Zeev
>
>
> --
> Zeev Suraski <zeev <email protected>>
> CTO, Zend Technologies Ltd. http://www.zend.com/
>
>
> --
> PHP Development Mailing List <http://www.php.net/>
> To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
> For additional commands, e-mail: php-dev-help <email protected>
> To contact the list administrators, e-mail: php-list-admin <email protected>
> 

-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe <email protected>
For additional commands, e-mail: php-dev-help <email protected>
To contact the list administrators, e-mail: php-list-admin <email protected>