PHP Programmers Section
PHP 5.2.5 Released
by Dixanta Shrestha
Dixanta Shrestha 
PHP 5.2.5 Released
[08-Nov-2007]
The PHP development team would like to announce the immediate availability of PHP 5.2.5.
This release focuses on improving the stability of the PHP 5.2.x branch
with over 60 bug fixes, several of which are security related. All
users of PHP are encouraged to upgrade to this release.
Further details about the PHP 5.2.5 release can be found in the release announcement for 5.2.5, the full list of changes is available in the ChangeLog for PHP 5.
Security Enhancements and Fixes in PHP 5.2.5:
Fixed dl() to only accept filenames. Reported by Laurent Gaffie.
Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887). Reported by Laurent Gaffie.
Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences. Reported by Rasmus Lerdorf
Fixed
possible triggering of buffer overflows inside glibc implementations of
the fnmatch(), setlocale() and glob() functions. Reported by Laurent
Gaffie.
Fixed "mail.force_extra_parameters" php.ini
directive not to be modifiable in .htaccess due to the security
implications. Reported by SecurityReason.
Fixed bug #42869 (automatic session id insertion adds sessions id to non-local forms).
Fixed bug #41561 (Values set with php_admin_* in httpd.conf can be overwritten with ini_set()).
For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is available here, detailing the changes between those releases and PHP 5.2.5.
Nov 20th 2007 00:39
PHP 5.2.5 Released
[08-Nov-2007]
The PHP development team would like to announce the immediate availability of PHP 5.2.5.
This release focuses on improving the stability of the PHP 5.2.x branch
with over 60 bug fixes, several of which are security related. All
users of PHP are encouraged to upgrade to this release.
Further details about the PHP 5.2.5 release can be found in the release announcement for 5.2.5, the full list of changes is available in the ChangeLog for PHP 5.
Security Enhancements and Fixes in PHP 5.2.5:
Fixed dl() to only accept filenames. Reported by Laurent Gaffie.
Fixed dl() to limit argument size to MAXPATHLEN (CVE-2007-4887). Reported by Laurent Gaffie.
Fixed htmlentities/htmlspecialchars not to accept partial multibyte sequences. Reported by Rasmus Lerdorf
Fixed
possible triggering of buffer overflows inside glibc implementations of
the fnmatch(), setlocale() and glob() functions. Reported by Laurent
Gaffie.
Fixed "mail.force_extra_parameters" php.ini
directive not to be modifiable in .htaccess due to the security
implications. Reported by SecurityReason.
Fixed bug #42869 (automatic session id insertion adds sessions id to non-local forms).
Fixed bug #41561 (Values set with php_admin_* in httpd.conf can be overwritten with ini_set()).
For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is available here, detailing the changes between those releases and PHP 5.2.5.
Nov 20th 2007 00:39
Sponsor Ads
Comments
|
|
Dixanta Shrestha
please post your question here what exactly you are after I m sure u will be replied thanks Nov 21st 2007 06:09 |
|
chase c.
 SysAdminlike i'm currently working on a personal project that need web gui. i know how mysql works and a basic php. i need to access mysql database from php. i just need a sample php app that can insert, modify, and delete a mysql database table values. it must be simple, flexible and easy to modify. can u help me on that. Nov 25th 2007 13:08 |
|
|
Dixanta Shrestha
dear nepgeek what would you prefer to use php4 or php5 code to connect with mysql database and access tables and stuffs Nov 25th 2007 21:51 |
|
Anand Kumar
Webmasteri m working with wamp server and using notepad++ . i want to use sendmail but unable to do that would you please help me to get the code for that Feb 11th 2015 03:34 |
so any tips for using mysql database using php
Nov 21st 2007 06:04