Joomla! Discussion Forums



It is currently Wed Nov 25, 2009 6:54 am (All times are UTC )

 




Post new topic Reply to topic  [ 1 post ] 
Author Message
Posted: Sat Nov 04, 2006 9:54 pm 
User avatar
Joomla! Guru
Joomla! Guru
Offline

Joined: Tue Jun 06, 2006 7:41 am
Posts: 808
Location: Third planet from Sol
The latest, stable release of PHP is 5.2.0.

Below is the Official PHP Release Announcement. Note the important security-related improvements.

Quote:
PHP 5.2.0 Release Announcement

The PHP development team is proud to announce the immediate release of PHP 5.2.0. This release is a major improvement in the 5.X series, which includes a large number of new features, bug fixes and security enhancements.

The key features of PHP 5.2.0 include:

    * New memory manager for the Zend Engine with improved performance and a more accurate memory usage tracking.
    * Input filtering extension was added and enabled by default.
    * JSON extension was added and enabled by default.
    * ZIP extension for creating and editing zip files was introduced.
    * Hooks for tracking file upload progress were introduced.
    * Introduced E_RECOVERABLE_ERROR error mode.
    * Introduced DateTime and DateTimeZone objects with methods to manipulate date/time information.
    * Upgraded bundled SQLite, PCRE libraries.
    * Upgraded OpenSSL, MySQL and PostgreSQL client libraries for Windows installations.
    * Many performance improvements.
    * Over 200 bug fixes.

Security Enhancements and Fixes in PHP 5.2.0:

    * Made PostgreSQL escaping functions in PostgreSQL and PDO extension keep track of character set encoding whenever possible.
    * Added allow_url_include, set to Off by default to disallow use of URLs for include and require.
    * Disable realpath cache when open_basedir and safe_mode are being used.
    * Improved safe_mode enforcement for error_log() function.
    * Fixed a possible buffer overflow in the underlying code responsible for htmlspecialchars() and htmlentities() functions.
    * Added missing safe_mode and open_basedir checks for the cURL extension.
    * Fixed overflow is str_repeat() & wordwrap() functions on 64bit machines.
    * Fixed handling of long paths inside the tempnam() function.
    * Fixed safe_mode/open_basedir checks for session.save_path, allowing them to account for extra parameters.
    * Fixed ini setting overload in the ini_restore() function.

All users of PHP, especially those using earlier PHP 5 releases are advised to upgrade to this release as soon as possible. This release also obsoletes the 5.1 branch of PHP.

For users upgrading from PHP 5.0 and PHP 5.1 there is an upgrading guide available here, detailing the changes between those releases and PHP 5.2.0.

For a full list of changes in PHP 5.2.0, see the ChangeLog.

Back to Security FAQ Table of Contents

Search Keywords: PHP4, PHP5, PHP, latest, stable, release

_________________
Web Home: http://www.ronliskey.com
Support http://support.educationgrove.com


Last edited by rliskey on Mon Nov 06, 2006 1:42 am, edited 1 time in total.

Top
  E-mail  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

Quick reply

 



Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group