PHP Programming 101

December 8th, 2008

5.2.7. is a security hazard–get rid of it!

Posted by editor in Information

PHP version 5.2.7. is dangerous and a security hazard; take it out and update to 5.2.8. immediately:

Due to a security bug found in the PHP 5.2.7 release, it has been removed from distribution. The bug affects configurations where magic_quotes_gpc is enabled, because it remains off even when set to on. In the meantime, use PHP 5.2.6 until PHP 5.2.8 is later released.

The PHP Development Team would like to announce the immediate availability of PHP 5.2.8. This release addresses a regression introduced by 5.2.7 in regard to the magic_quotes functionality, which was broken by an incorrect fix to the filter extension. All users who have upgraded to 5.2.7 are encouraged to upgrade to this release. Alternatively you can apply a work-around for the bug by changing “filter.default_flags=0″ in php.ini.

Take out 5.2.7. as soon as possible and use the newest one for security’s sake!

Source

Comments are closed.

Sorry, the comment form is closed at this time.