Guide to PHP Security

Quicksearch

Calendar

Comments

Mark van der Velden about Beware of the default Apache 2 config for PHP

Wed, 01.09.2010 02:15

Interesting behavior, I've tri ed it with several extension b ack then and it only worked on bogus file extensions. [...]

Ilia Alshanetsky about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 15:17

Actually with .txt the PHP cod e gets executed, one of the re asons I found the problem out since the test server ha [...]

James Baugh about PHP Excel Extension 0.8.6

Tue, 31.08.2010 13:03

I re-compiled (I did change my PHP version and compiled with --enable-debug) and the probl em went away. Not sure w [...]

Henning Kockerbeck about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 06:24

Sorry, looks like the filter o n this blog doesn't like Apach e directives with brackets tha t look like HTML tags

[...]

Henning Kockerbeck about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 06:21

Ubuntu (at least the current 1 0.04 LTS) uses a variant which in my opinion is a better sol ution than switching fro [...]

Mark van der Velden about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 05:36

This is not entirely correct, it depends on the bogus extens ion. If you append .txt to a P HP file, .txt get's prec [...]

AllenJB about Beware of the default Apache 2 config for PHP

Tue, 31.08.2010 02:29

See: - http://httpd.apache.or g/docs/2.2/mod/mod_mime.html#a ddhandler - http://httpd.apac he.org/docs/2.2/mod/mod_ [...]

Gustavo Lopes about Beware of the default Apache 2 config for PHP

Mon, 30.08.2010 23:32

I mean let's say you have name d test.php. You use MultiViews and URLs without extensions, relying on content negot [...]

Ilia Alshanetsky about PHP Excel Extension 0.8.6

Mon, 30.08.2010 21:56

Can try to compile php with -- enable-debug and see if the er ror happens still? I've tr ied a few times with dif [...]

Ilia Alshanetsky about Beware of the default Apache 2 config for PHP

Mon, 30.08.2010 21:40

Well, it is not about wrong or right, If you want a.php.txt to be treated as a PHP script then, by all means use A [...]

Thursday, September 14. 2006

Posted by Ilia Alshanetsky in PHP

Comments (18)
Trackback (1)

PHP 5.2.0 RC4 Released!

Huzzah!

The final release candidate of 5.2.0, RC4 is out, which means the final release is just around the corner. The tarballs can be found here:

http://downloads.php.net/ilia/php-5.2.0RC4.tar.bz2 (71456d89419e5b67c59aca713a3c86f4)
http://downloads.php.net/ilia/php-5.2.0RC4.tar.gz (41c5ac4a378266b17a7fde9565325cb9)

Given that this is a final release, this is the last chance to identify major issues or regressions. So, please test your code against this release to make sure that everything is working, and if not, let us know.

Trackbacks

Trackback specific URI for this entry

PHP 5.2 RC 4
Der Release Manager für PHP 5.2, Ilia Alshanetsky, hat den vierten Release Candidate für PHP 5.2.0 freigegeben. Der RC ist Feature complete, eine Final soll am 28.09.06 erscheinenAlle Änderungen stehen im Changelog. Downloads steht als Source (.tar.gz/

Weblog: PHP-Homepage.de - News
Tracked: Sep 15, 08:58

Comments

Display comments as (Linear | Threaded)

Dear Ilia,

Good to see such a good progress!

Unfortunately the corresponding Win32 binaries on
http://downloads.php.net/edink/
are not downloadable.

Best regards,
René

#1 Rene Leonhardt on 2006-09-14 17:23 (Reply)

Where can I find the changelog of PHP 5.2?

#2 Arnold Daniels on 2006-09-15 06:36 (Reply)

http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&pathrev=PHP_5_2

or short form:

http://www.php.net/php5news

#3 Rene Leonhardt on 2006-09-15 10:03 (Reply)

http://cvs.php.net/viewvc.cgi/php-src/NEWS?view=annotate&pathrev=PHP_5_2

Here you go.

#3.1 Ilia Alshanetsky (Homepage) on 2006-09-15 11:17 (Reply)

Hellow,

Compile of RC4 is ok on HP-UX (11.00), but when I launch apache I've the following error :

/usr/lib/dld.sl: Unresolved symbol: PQftable (code) from /mypath_to_apache/libexec/libphp5.so

I've not this problem with php 5.1.2

Tell me if and what do you need for additional information.

Thanks

#4 dactar on 2006-09-15 12:28 (Reply)

What version of PostgreSQL client library are you using?

#4.1 Ilia Alshanetsky (Homepage) on 2006-09-15 12:32 (Reply)

PostgreSQL(libpq) Version 7.2.1

#4.1.1 dactar on 2006-09-15 12:38 (Reply)

This is rather old version of PostgreSQL, the simplest solution would be to get a slightly more recent version.

The fix will be shortly in the CVS, basically we forgot to check for the availability of the PQftable() function.

#4.1.1.1 Ilia Alshanetsky (Homepage) on 2006-09-15 12:55 (Reply)

I'll wait for the correction in the CVS because I can't upgrade at this time PostgreSQL.

Thanks

PS : I you like clouds according to your gallery, I've something for you :

http://boston.myotis.ch/jc/gallerie.old/images/australie/2004-11-06/DSCN1006.JPG

#5 Anonymous on 2006-09-15 13:00 (Reply)

The patch is in the CVS now.

#5.1 Ilia Alshanetsky (Homepage) on 2006-09-15 15:49 (Reply)

openssl vs imap on HP-UX (and only HP-UX) with shared libraries

I've to change in line 47912 of configure file :

&& test -s conftest\${ac_exeext} && (./conftest; exit)

by

&& test -s conftest\${ac_exeext} && chatr +s enable conftest && (./conftest; exit)

otherwise the test failed.

explication (from man page of chatr) :

+s flag : Control whether the directory path list specified
with the SHLIB_PATH environment variable can be
used to locate shared libraries needed by the
program. The two flag values, enable and disable,
respectively enable and disable use of the
environment variable.

Any chance to have a OS condition in the configure about this ?

Thanks ;D

#6 dactar on 2006-09-15 13:33 (Reply)

Dear Ilia,

I don't know which ZIP version PHP 5.2.0RC4 uses, but don't forget to upgrade to the latest 1.7.3 from PECL

phpinfo() on Win32 says for RC4:
Zip version 2.0.0
Libzip version 0.7.1

Best regards,
René

#7 Rene Leonhardt on 2006-09-17 02:46 (Reply)

The one in RC4 is the latest version currently available.

#7.1 Ilia Alshanetsky (Homepage) on 2006-09-17 11:50 (Reply)

when these patches are going to get in the CVS?

this one http://bugs.php.net/bug.php?id=36681 - almost half an year old

and this one http://bugs.php.net/bug.php?id=37870

#8 Tzvetan Tzankov on 2006-09-18 07:24 (Reply)

Both of these bugs are now fixed.

#8.1 Ilia Alshanetsky (Homepage) on 2006-09-19 11:47 (Reply)

Dear Ilia,

I tried the environment variables LDFLAGS, LD_RUN_PATH and even LD_LIBRARY_PATH to additionally include the --with-libxml-dir directory in order to avoid the
"grep: /usr/local/lib/libxml2.la: No such file or directory"
error message, but it didn't work with PHP 5.2.0RC3 and 5.2.0RC4.

I even could not find the line which displayed the message in the Makefiles, do you know the responsible configure line which generates this error message?

The configure output displays the correct information:
checking libxml2 install dir... /usr/local/applications/lamp2/libxml2
checking for xml2-config path... /usr/local/applications/lamp2/libxml2/bin/xml2-config
checking whether libxml build works... yes

But I can only make PHP when I copy the already existing
/usr/local/applications/lamp2/libxml2/lib/libxml2.la
to the folder mentioned in the error message:
/usr/local/lib/libxml2.la
After that the build finishes flawless and I can execute PHP even after unsetting all extra environment variables.

How can I prepare the configure in order to use the lib/libxml2.la in the --with-libxml-dir directory?

Best regards,
René

#9 Rene Leonhardt on 2006-09-20 09:21 (Reply)

sys_get_temp_dir() is missing from 5_2 and nobody knows how it is not there

#10 Cristian Rodriguez (Homepage) on 2006-09-24 02:41 (Reply)

It was never planned for 5.2 and is not there. Release news work by inclusion, not exclusion. If it is not explicitly mentioned in the changelog, it is not part of the release.

#10.1 Ilia Alshanetsky (Homepage) on 2006-09-24 13:01 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Standard emoticons like :-) and ;-) are converted to images. E-Mail addresses will not be displayed and will only be used for E-Mail notifications
	Remember Information? Subscribe to this entry