PHP 5.2.12 發(fā)布 修復(fù)60多個(gè)bug
PHP是一種新型的CGI程序編寫語(yǔ)言,易學(xué)易用,運(yùn)行速度快,可以方便快捷地編寫出功能強(qiáng)大,運(yùn)行速度快,并可同時(shí)運(yùn)行于 Windows、Unix、Linux平臺(tái)的Web后臺(tái)程序, 內(nèi)置了對(duì)文件上傳、密碼認(rèn)證、Cookies操作、郵件收發(fā)、動(dòng)態(tài)GIF生成等功能,PHP 直接為很多數(shù)據(jù)庫(kù)提供原本的連接,包括Oracle、Sybase、Postgres、Mysql、Informix、Dbase、Solid、 Access等,完全支持ODBC接口,用戶更換平臺(tái)時(shí),無(wú)需變換PHP代碼,可即拿即用. http://cn.php.net/distributions/php-5.2.12.tar.bz2 (源碼)http://cn.php.net/distributions/php-5.2.12-Win32.zip (win 二進(jìn)制包)
查看ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.12
Security Enhancements and Fixes in PHP 5.2.12:
Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus) Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus) Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia) Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas) Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)
相關(guān)文章:
1. PHP 上傳圖片并壓縮方法2. php操作redis常見方法示例【key與value操作】3. PHP代碼加密的方法總結(jié)4. PHP的curl常用的5個(gè)例子5. PHP AOP教程案例6. 基于Go和PHP語(yǔ)言實(shí)現(xiàn)爬樓梯算法的思路詳解7. PHP數(shù)據(jù)庫(kù)緩存擴(kuò)展Memcache簡(jiǎn)介、安裝及相關(guān)函數(shù)大全8. PHP如何將session保存到memcached中?如何分布式保存PHP session9. PHP中迭代器的簡(jiǎn)單實(shí)現(xiàn)及Yii框架中的迭代器實(shí)現(xiàn)方法示例10. php變量與字符串的增刪改查操作示例
