Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

AppDynamics PHP Blog:
Predicting the Future of PHP Security – Part 3
Mar 24, 2016 @ 09:30:15

On the AppDynamics blog there's a post from Omed Habib where he looks at the current state of security in the PHP language and makes predictions about the future of it in PHP and where the language might be heading.

In some ways security is an infinite game of chess on a board the size of the world. For every move you make, the hackers have a countermove ready. They are highly motivated to take what you have, so the game never ends; it just switches players once in awhile. In this final blog in the series, we are going to review the game board, with a look at the most recent changes to security in PHP 7 and earlier supported versions. Then, we’ll try to look a few moves ahead with predictions for the future of PHP security.

In the article he talks about PHP's popularity and how it has somewhat worked against it and its reputation when it comes to secure development. He covers PHP 7 and some of the security-related updates that came with it including:

  • whitelisting classes on unserialize
  • the cryptographically secure random number generator
  • patches for buffer overflows and memory leaks

He ends the post looking at a possible future of the language based on comments made in this other article., suggesting that one possible place for the language to head is into the IoT (Internet of Things) space and interacting with the devices on the other end.

tagged: predictions security language php7 features patches iot direction

Link: https://blog.appdynamics.com/php/predicting-the-future-of-php-security/

Zend Developer Zone:
The PAT directory
Jan 22, 2007 @ 15:58:00

In an effort to keep track of some of the lesser seen patches to the core of PHP, the Zend Developer Zone has started a weekly summary that talks about the PAT directory:

The PAT directory contains patches (fixes and improvements for the C source code behind PHP) that have been sent to the internal developers' mailing list by members of the wider PHP community. The mailing list is fairly busy - as are the developers - and patches aren't always noticed by someone able to review and perhaps apply them; this can lead to people repeatedly mailing the same patch to the list in the belief that they're being ignored!

The idea behind the posts is to provide a listing of those patches for those looking for them (including the PHP dev team) until they've been evaluated and moved out of the PAT directory purgatory.

tagged: pat directory patches fixes improvements ignore pat directory patches fixes improvements ignore

Link:

Zend Developer Zone:
The PAT directory
Jan 22, 2007 @ 15:58:00

In an effort to keep track of some of the lesser seen patches to the core of PHP, the Zend Developer Zone has started a weekly summary that talks about the PAT directory:

The PAT directory contains patches (fixes and improvements for the C source code behind PHP) that have been sent to the internal developers' mailing list by members of the wider PHP community. The mailing list is fairly busy - as are the developers - and patches aren't always noticed by someone able to review and perhaps apply them; this can lead to people repeatedly mailing the same patch to the list in the belief that they're being ignored!

The idea behind the posts is to provide a listing of those patches for those looking for them (including the PHP dev team) until they've been evaluated and moved out of the PAT directory purgatory.

tagged: pat directory patches fixes improvements ignore pat directory patches fixes improvements ignore

Link:

Scott Mattocks's Blog:
PHP-GTK News, Issue #18
Jun 21, 2006 @ 12:12:39

From Scott Mattocks today, we get the latest news on the PHP-GTK front with this week's PHP-GTK News, issue #18.

This week's PHP-GTK News is again full of development patches as the push toward an alpha release continues. In addition, there is the announcement of an upcoming PHP-GTK 2 talk and a new 2D graphics package written in PHP-GTK 2.

Things mentioned this week include:

  • Gtk::timeout_add() memory leak fixed
  • A slew of patches
  • A PHP-GTK 2 talk is scheduled for php|works
  • A 2D graphics package for PHP-GTK 2 is now available

For the details on these items and the full story of what happened this week, check out his full post.

tagged: php-gtk news issue18 patches talk php-gtk2 php-gtk news issue18 patches talk php-gtk2

Link:

Scott Mattocks's Blog:
PHP-GTK News, Issue #18
Jun 21, 2006 @ 12:12:39

From Scott Mattocks today, we get the latest news on the PHP-GTK front with this week's PHP-GTK News, issue #18.

This week's PHP-GTK News is again full of development patches as the push toward an alpha release continues. In addition, there is the announcement of an upcoming PHP-GTK 2 talk and a new 2D graphics package written in PHP-GTK 2.

Things mentioned this week include:

  • Gtk::timeout_add() memory leak fixed
  • A slew of patches
  • A PHP-GTK 2 talk is scheduled for php|works
  • A 2D graphics package for PHP-GTK 2 is now available

For the details on these items and the full story of what happened this week, check out his full post.

tagged: php-gtk news issue18 patches talk php-gtk2 php-gtk news issue18 patches talk php-gtk2

Link:

Scott Mattocks's Blog:
PHP-GTK News #17
Jun 16, 2006 @ 09:12:25

Scott Mattocks has contributed information about the latest PHP-GTK News, issue #17:

Sorry for the delay. The news this week is short but rich. We only have a list of patches and documenation updates but the list for both is pretty long.

Included in the lists this time are updates to the GtkAboutDialog::set_email_hook(), GtkContainer::set_focus_chain(), and GtkTreeSortable::set_default_sort_func() functions as well as the documentation on GtkIconView, GtkStatusbar, GtkToolTips, and GtkRadioToolButton.

For details on each of those above (and many others), check out the full story where each is linked to its updates.

tagged: php-gtk news issue17 documentation patches php-gtk news issue17 documentation patches

Link:

Scott Mattocks's Blog:
PHP-GTK News #17
Jun 16, 2006 @ 09:12:25

Scott Mattocks has contributed information about the latest PHP-GTK News, issue #17:

Sorry for the delay. The news this week is short but rich. We only have a list of patches and documenation updates but the list for both is pretty long.

Included in the lists this time are updates to the GtkAboutDialog::set_email_hook(), GtkContainer::set_focus_chain(), and GtkTreeSortable::set_default_sort_func() functions as well as the documentation on GtkIconView, GtkStatusbar, GtkToolTips, and GtkRadioToolButton.

For details on each of those above (and many others), check out the full story where each is linked to its updates.

tagged: php-gtk news issue17 documentation patches php-gtk news issue17 documentation patches

Link:

Scott Mattocks' Blog:
PHP-GTK News #11
May 03, 2006 @ 08:57:20

Scott Mattocks submitted a link to his most current edition of the latest and greatest from the world of PHP-GTK - Issue #11.

Included in this edition are mentions of:

  • patches applied this week (GtkTreeModel::iter_nth_child, GtkTreeModel::iter_parent, GtkTreeModel::get, GtkWidget::is_visible)
  • a fix for a segault dealing with the drag-n-drop functionality
  • the release of a new Glade tutorial
  • a question about creating your own widgets to extend PHP-GTK's current set
  • a new package release by Christian on the Gnope.org site for a drag-n-drop development environment.

You can get the complete details on each of these stories from this edition of the latest from the world of PHP-GTK.

tagged: php-gtk news issue11 patches segfault glade tutorial php-gtk news issue11 patches segfault glade tutorial

Link:

Scott Mattocks' Blog:
PHP-GTK News #11
May 03, 2006 @ 08:57:20

Scott Mattocks submitted a link to his most current edition of the latest and greatest from the world of PHP-GTK - Issue #11.

Included in this edition are mentions of:

  • patches applied this week (GtkTreeModel::iter_nth_child, GtkTreeModel::iter_parent, GtkTreeModel::get, GtkWidget::is_visible)
  • a fix for a segault dealing with the drag-n-drop functionality
  • the release of a new Glade tutorial
  • a question about creating your own widgets to extend PHP-GTK's current set
  • a new package release by Christian on the Gnope.org site for a drag-n-drop development environment.

You can get the complete details on each of these stories from this edition of the latest from the world of PHP-GTK.

tagged: php-gtk news issue11 patches segfault glade tutorial php-gtk news issue11 patches segfault glade tutorial

Link: