This RC includes a fair number of fixes since our last release and predominantly works on improving the stability of the 5.2 tree as well as including a small number of minor security fixes. I'd like to ask everyone to test this release against your code and setups, we are aiming for a quick release cycle and user feedback is critical for a successful release.

You can download this latest version here.

The PAT directory contains patches (fixes and improvements for the C source code behind PHP) that have been sent to the internal developers' mailing list by members of the wider PHP community. The mailing list is fairly busy - as are the developers - and patches aren't always noticed by someone able to review and perhaps apply them; this can lead to people repeatedly mailing the same patch to the list in the belief that they're being ignored!

The idea behind the posts is to provide a listing of those patches for those looking for them (including the PHP dev team) until they've been evaluated and moved out of the PAT directory purgatory.

The PHP development team is proud to announce the release of PHP 4.4.3. This release combines small number of bug fixes and resolves a number of security issues.

Some of the updates to this edition include:

• Disallow certain characters in session names.
• Prevent jumps to parent directory via the 2nd parameter of the tempnam() function.
• Fixed cross-site scripting inside the phpinfo() function.
• Upgraded bundled PCRE library to version 6.6

You can download this latest edition here.

Chris Jones and I have just released an updated version of the Underground PHP and Oracle Manual on OTN. We've numbered it as 1.2.1, and it has some bug fixes, and some extra information on Oracle SQL Developer.

If you have comments or corrections you'd like to submit on this new updated version, you can post a comment here.

Version 0.6.5 of the MyBic PHP/AJAX framework was released today on sourceforge (http://www.litfuel.net/mybic). It's been 3 months since the last update which shows that MyBic is quickly approaching the 1.0 release version which means it will be stable enough for use in all types of production systems. It is currently being used in several enterprise companies at the moment and is being used in desktop like ajax applications as well. Thanks to all who help make MyBic that much better!

The listed updates are:

• added loadCSS method that allows you to add stylesheets at runtime
• fixed bug for abort timeout not working when requests are queued
• fixed issue where format and method weren't being used if the requests were queued
• mybic_server.php now supports either using the mybic_json.php file OR omar Kilani's C based JSON extension
• added ability to stop ajax calls until a certain piece of functionality finishes

To download this latest version of the library or just get complete details, head over to the project's site.

The PHP development team is proud to announce the release of PHP 5.1.2. This release combines small feature enhancements with a fair number of bug fixes and addresses three security issues. All PHP 5 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 5 ChangeLog.

Some of the larger changes in this new version include: "HTTP Response Splitting has been addressed in ext/session and in the header() function", "Upgraded OCI8 extension", and "Over 85 various bug fixes".

So, what are you waiting for? Get over and upgrade now!]]> Thu, 12 Jan 2006 09:27:12 -0600