PHP 5.4.0 已经发布!

The PHP development team is proud to announce the immediate availability of PHP 5.4.0. This release is a major leap forward in the 5.x series, which includes a large number of new features and bug fixes.

Some of the key new features include: traitsa shortened array syntaxa built-in webserver for testing purposes and more. PHP 5.4.0 significantly improves performance, memory footprint and fixes over 100 bugs.

For users upgrading from PHP 5.3 there is a migration guide available here, detailing the changes between those releases and PHP 5.4.0.

Further details about the PHP 5.4.0 release can be found in the release announcement, and the full list of changes are available in theChangeLog.

Please note that it may take a while until the release is available on all mirrors.

Posted in PHP中文博客 | Leave a comment

用.htaccess禁止查看目录下内容

如网站的某个目录没有首页文件,如index.htm, default.html,index.php等,我们只要打开这个目录,就可以查看到这个目录下所有内容。也正因此,很多黑客利用这个方法来查某个目录下文件的漏洞以便攻击这个网站。

那么有没有办法禁止人们查看这类没有默认首页的目录呢?当然有!对于一个支持.htaccess文件的空间, 可以在.htaccess文件的开始处加如下代码:
# Disable Directory Browsing
Options All -Indexes

我们也可另一个方法,那就是在这个目录下加下空间的首页文件以达到人这查看不到这个目录下其它内容的目的。

本文译自:http://www.phpknow.com/disable-directory-browsing-with-htaccess/

Posted in PHP小技巧 | Leave a comment

PHP 5.3.10 已经发布!

The PHP development team would like to announce the immediate availability of PHP 5.3.10. This release delivers a critical security fix.

Security Fixes in PHP 5.3.10:

  • Fixed arbitrary remote code execution vulnerability reported by Stefan Esser, CVE-2012-0830.

All users are strongly encouraged to upgrade to PHP 5.3.10.

For source downloads please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

Posted in PHP中文博客 | Leave a comment

PHP 5.4.0 RC6 已经发布!

The PHP development team announces the 6th release candidate of PHP 5.4. PHP 5.4 includes new language features and removes several legacy (deprecated) behaviours. Windows binaries can be downloaded from the Windows QA site.

THIS IS A RELEASE CANDIDATE – DO NOT USE IT IN PRODUCTION!.

This is the 6th release candidate. The release candidate phase is intended as a period of bug fixing prior to the stable release. No new features should be included before the final version of PHP 5.4.0.

The 6th release candidate focused on improving traits. Please test them carefully and help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please take the time to test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

A complete list of changes since the last release candidate can be found at NEWS

The next candidate will be released on Feb 2.

Posted in PHP中文博客 | Leave a comment

PHP 5.4.0 RC5 已经发布

The PHP development team announces the 5th release candidate of PHP 5.4. PHP 5.4 includes new language features and removes several legacy (deprecated) behaviours. Windows binaries can be downloaded from the Windows QA site.

THIS IS A RELEASE CANDIDATE – DO NOT USE IT IN PRODUCTION!.

This is the 5th release candidate. The release candidate phase is intended as a period of bug fixing prior to the stable release. No new features should be included before the final version of PHP 5.4.0.

We got a lot of feedback that helped us to improve the upcoming PHP version. Please continue to help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please take the time to test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

A complete list of changes since the last release candidate can be found at NEWS

The next and probably last release candidate will be released in 14 days.

Posted in PHP官方消息 | Leave a comment

PHP 5.3.9 已经发布!

The PHP development team would like to announce the immediate availability of PHP 5.3.9. This release focuses on improving the stability of the PHP 5.3.x branch with over 90 bug fixes, some of which are security related.

Security Enhancements and Fixes in PHP 5.3.9:

  • Added max_input_vars directive to prevent attacks based on hash collisions. (CVE-2011-4885)
  • Fixed bug #60150 (Integer overflow during the parsing of invalid exif header). (CVE-2011-4566)

Key enhancements in PHP 5.3.9 include:

  • Fixed bug #55475 (is_a() triggers autoloader, new optional 3rd argument to is_a and is_subclass_of).
  • Fixed bug #55609 (mysqlnd cannot be built shared)
  • Many changes to the FPM SAPI module

For a full list of changes in PHP 5.3.9, see the ChangeLog. For source downloads please visit our downloads page, Windows binaries can be found on windows.php.net/download/.

All users are strongly encouraged to upgrade to PHP 5.3.9.

Posted in PHP中文博客 | Leave a comment

PHP 5.4.0 RC4 已经发布!

这是官方在圣诞节发布的消息:

The PHP development team is proud to announce the 4th release candidate of PHP 5.4. PHP 5.4 includes new language features and removes several legacy (deprecated) behaviours. Windows binaries can be downloaded from the Windows QA site.

THIS IS A RELEASE CANDIDATE – DO NOT USE IT IN PRODUCTION!.

This is the 4th release candidate. The release candidate phase is intended as a period of bug fixing prior to the stable release. No new features should be included before the final version of PHP 5.4.0.

The new release candidate fixed several bugs, including:

  • Added max_input_vars directive to prevent attacks based on hash collisions
  • Fixed a segfault in the traits code

Read the NEWS file for a complete list of changes in this release.

Please continue to help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

The next release candidate will be released in 14 days.

Posted in PHP官方消息 | Leave a comment

PHP 5.4.0 RC3已经发布!

跟上时代,:),另外,我们博客也升级到Wordpress 3.3版本了,感觉真不错!

The PHP development team is proud to announce the third release candidate of PHP 5.4. PHP 5.4 includes new language features and removes several legacy (deprecated) behaviours. Windows binaries can be downloaded from the Windows QA site.

THIS IS A RELEASE CANDIDATE – DO NOT USE IT IN PRODUCTION!.

This is the third release candidate. The release candidate phase is intended as a period of bug fixing prior to the stable release. No new features should be included before the final version of PHP 5.4.0.

Changes since the previous release candidate include:

  • The intl extension now supports UTS #46 mapping for IDNA
  • $_SERVER['SERVER_NAME'] and $_SERVER['SERVER_PORT'] are now available in the builtin CLI server implementation.
  • Several improvements and bug fixes in the Zend Engine, Core and other extensions.

Read the NEWS file for a complete list of changes in this release.

Please continue to help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

Posted in PHP官方消息 | Leave a comment

PHP 5.3.9 RC2和PHP 5.4 RC2发布

官方原文:http://news.php.net/php.internals/56582

Hello,

The PHP team released the second release candidates of PHP 5.3.9 and PHP
5.4.0 today:

You can find the packages for PHP 5.3.9RC2 here:

http://downloads.php.net/johannes

and respectively for PHP 5.4.0RC2:

http://downloads.php.net/stas

The Windows team provides windows binaries for both releases which you
find here:

http://windows.php.net/qa/

Please ensure that the releases are solid and all things behave as
expected! Test these release candidates against your code base and
report any problems you encounter or successful tests you’ve run.

The third release candidates will be released on December 8.

regards,
Johannes, Stas and David

Posted in PHP官方消息 | Leave a comment

PHP 5.4 RC1 已经发布!

The PHP development team is proud to announce the first release candidate of PHP 5.4. PHP 5.4 includes new language features and removes several legacy (deprecated) behaviours. Windows binaries can be downloaded from the Windows QA site.

THIS IS A RELEASE CANDIDATE – DO NOT USE IT IN PRODUCTION!

This is the first release candidate. No new features will be included before the final version of PHP 5.4.0. The release candidate phase is intended as a period of bug fixing prior to the stable release.

Changes since the last beta version include:

  • Added class member access on instantiation (e.g. (new Foo)->bar()).
  • Changed silent conversion of array to string to produce a notice.
  • Numerous bug fixes and improvements in the Core and other extensions.

Please help us to identify bugs in order to ensure that the release is solid and all things behave as expected. Please test this release candidate against your code base and report any problems that you encounter to the QA mailing list and/or the PHP bug tracker.

Read the NEWS file for a complete list of changes in this release.

Posted in PHP官方消息 | Leave a comment