Google

Tuesday, July 10, 2007

What's hot in PHP

New Delhi PHP Unconference: Call for Speakers/Campers

[09-Jul-2007]

India's biggest Open Source Unconference "OSS Camp" has been scheduled for September 8 - 9, 2007 in New Delhi.

Embedded in the OSS Camp is India's first community-driven PHP Camp. PHP Camp will bring together the PHP community in a distinctly "unconference" setting. It is an intense event with discussions, demos, and interaction from all participants. Participation is free of cost!. Some of the tracks for PHP camps are Frameworks, Unit Testing, PHP Security, Performance Management, High Availability beside product specific themes like Joomla, Drupal, EZ, Dot Project camps.

Participants can add up their sessions on http://www.osscamp.in/OSSCampDelhi/index.php?title=PHP_Camp. You should restrict your sessions to 40 minutes (90 minutes in case of workshop). Your sessions should be hardcore PHP specific sessions.

PHP 5.2.3 Released

The PHP development team would like to announce the immediate availability of PHP 5.2.3. This release continues to improve the security and the stability of the 5.X branch as well as addressing two regressions introduced by the previous 5.2 releases. These regressions relate to the timeout handling over non-blocking SSL connections and the lack of HTTP_RAW_POST_DATA in certain conditions. All users are encouraged to upgrade to this release.

Further details about the PHP 5.2.3 release can be found in the release announcement for 5.2.3, the full list of changes is available in the ChangeLog for PHP 5.

Security Enhancements and Fixes in PHP 5.2.3:

  • Fixed an integer overflow inside chunk_split() (by Gerhard Wagner, CVE-2007-2872)
  • Fixed possible infinite loop in imagecreatefrompng. (by Xavier Roche, CVE-2007-2756)
  • Fixed ext/filter Email Validation Vulnerability (MOPB-45 by Stefan Esser, CVE-2007-1900)
  • Fixed bug #41492 (open_basedir/safe_mode bypass inside realpath()) (by bugs dot php dot net at chsc dot dk)
  • Improved fix for CVE-2007-1887 to work with non-bundled sqlite2 lib.
  • Added mysql_set_charset() to allow runtime altering of connection encoding.

For users upgrading to PHP 5.2 from PHP 5.0 and PHP 5.1, an upgrade guide is available here, detailing the changes between those releases and PHP 5.2.3.