PHP 5.2.12 發(fā)布 修復(fù)60多個bug
PHP是一種新型的CGI程序編寫語言,易學(xué)易用,運行速度快,可以方便快捷地編寫出功能強大,運行速度快,并可同時運行于 Windows、Unix、Linux平臺的Web后臺程序, 內(nèi)置了對文件上傳、密碼認(rèn)證、Cookies操作、郵件收發(fā)、動態(tài)GIF生成等功能,PHP 直接為很多數(shù)據(jù)庫提供原本的連接,包括Oracle、Sybase、Postgres、Mysql、Informix、Dbase、Solid、 Access等,完全支持ODBC接口,用戶更換平臺時,無需變換PHP代碼,可即拿即用. http://cn.php.net/distributions/php-5.2.12.tar.bz2 (源碼)http://cn.php.net/distributions/php-5.2.12-Win32.zip (win 二進(jìn)制包)
查看ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.12
Security Enhancements and Fixes in PHP 5.2.12:
Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus) Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus) Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia) Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas) Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)
相關(guān)文章:
1. PHP基于phpqrcode類生成二維碼的方法示例詳解2. Nginx+php配置文件及原理解析3. 用php簡單實現(xiàn)Search Engine Friendly的URL4. 深入分析PHP設(shè)計模式5. PHP設(shè)計模式中工廠模式深入詳解6. PHP8.0新功能之Match表達(dá)式的使用7. php變量與字符串的增刪改查操作示例8. PHP擴展之針對搜索引擎的擴展(一)——Apache Solr9. PHP輸出控制功能在簡繁體轉(zhuǎn)換中的應(yīng)用 10. ThinkPHP5實現(xiàn)JWT Token認(rèn)證的過程(親測可用)
