Re: 4.1.2

Yeah, I realized that. As you know, though, I still agree with Karl that those patches shouldn't have been in there w/o QA, but either way, it doesn't really matter now. Zeev At 03:03 02/03/2002, Rasmus Lerdorf wrote:

None of the other patches have so far proven to be troublesome. Each complaint I have looked into so far have been user error or local system changes that happened since they compiled 4.1.1. -Rasmus On Sat, 2 Mar 2002, Zeev Suraski wrote: Going through QA was not an option given the security issue at hand. I was personally in favour of releasing 4.1.2 with the security fix only, but I didn't really push my opinion too hard, and it got out with a few other patches as well. Again, going through QA was simply not an option. Zeev At 20:54 01/03/2002, Karl Austin wrote:

Hi, I'd just like to voice my concern that 4.1.2 didn't go through QA when it obviously needed too as more than just the code to fix the file upload security hole had changed. I just tried to compile 4.1.2 with mcrypt support and it failed, yet it works perfect with a patched copy of 4.1.1 - surely 4.1.2 should be the exact same code as a patched 4.1.1 is? I appreciate that there was a need to get 4.1.2 out quickly, but surely the best idea would have been to just change the few lines of code for the file upload and leave it at that? Thanks, Karl -- PHP Quality Assurance Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php

-- PHP Quality Assurance Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php