PHP 5.2.12 發(fā)布 修復60多個bug
PHP是一種新型的CGI程序編寫語言,易學易用,運行速度快,可以方便快捷地編寫出功能強大,運行速度快,并可同時運行于 Windows、Unix、Linux平臺的Web后臺程序, 內(nèi)置了對文件上傳、密碼認證、Cookies操作、郵件收發(fā)、動態(tài)GIF生成等功能,PHP 直接為很多數(shù)據(jù)庫提供原本的連接,包括Oracle、Sybase、Postgres、Mysql、Informix、Dbase、Solid、 Access等,完全支持ODBC接口,用戶更換平臺時,無需變換PHP代碼,可即拿即用. http://cn.php.net/distributions/php-5.2.12.tar.bz2 (源碼)http://cn.php.net/distributions/php-5.2.12-Win32.zip (win 二進制包)
查看ChangeLog: http://www.php.net/ChangeLog-5.php#5.2.12
Security Enhancements and Fixes in PHP 5.2.12:
Fixed a safe_mode bypass in tempnam() identified by Grzegorz Stachowiak. (CVE-2009-3557, Rasmus) Fixed a open_basedir bypass in posix_mkfifo() identified by Grzegorz Stachowiak. (CVE-2009-3558, Rasmus) Added "max_file_uploads" INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion, identified by Bogdan Calin. (CVE-2009-4017, Ilia) Added protection for $_SESSION from interrupt corruption and improved "session.save_path" check, identified by Stefan Esser. (CVE-2009-4143, Stas) Fixed bug #49785 (insufficient input string validation of htmlspecialchars()). (CVE-2009-4142, Moriyoshi, hello at iwamot dot com)
相關(guān)文章:
1. jQuery加PHP實現(xiàn)圖片上傳并提交的示例代碼2. PHP json_encode中文亂碼解決方法3. 深入解析PHP底層機制及相關(guān)原理4. PHP使用Http Post請求發(fā)送Json對象數(shù)據(jù)代碼解析5. php使用正則驗證密碼字段的復雜強度原理詳細講解 原創(chuàng)6. JS PHP字符串截取函數(shù)實現(xiàn)原理解析7. PHP session反序列化漏洞超詳細講解8. PHP數(shù)組實際占用內(nèi)存大小原理解析9. 基于PHP做個圖片防盜鏈10. PHP實現(xiàn)給用戶發(fā)微信消息提醒功能
