Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and4.2.1
| From: | Richard Lynch | Date: | Wed, 24 Jul 2002 03:36:52 +0000 |
| Subject: | Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and4.2.1 | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-109232@lists.php.net to get a copy of this message | ||
>Very cute! "Upgrade Now!" It will work well with PHP newbies. Not!
If you are on Windoze, just download and run the installer or whatever you
did last time that actually worked, as much as anything on Windoze works.
If on Un*x:
Download 4.2.2 from http://php.net and save it in /usr/src or
where-ever you
find convenient.
cd to the directory where php-4.2.2.tar.gz lives.
Untar it:
tar -xzf php-4.2.2.tar.gz
Copy the configure settings you used before:
cp php-4.1.0/config.nice php-4.2.2
Move into the new PHP directory:
cd php-4.2.2
Do the config.nice (it's what you used last time):
./config.nice
Pay attention to the crap that scrolls by, if you can read that fast :-)
Or, instead of just ./config.nice, use:
./config.nice 2&>1 > config.output &
Then you can use:
tail -f config.output
to see what's happening as it goes (type control-C to quit tail), or
less config.output
after you come back from your coffee-break.
Compile PHP:
make
(Maybe time for another coffee-break.)
Install PHP:
make install
Stop Apache: ***
/usr/local/apache/bin/apachectl stop
Start Apache:
/usr/local/apache/bin/apachectl start
Confirm the new PHP is working by surfing to a file with:
<?php phpinfo();?>
in it.
Remove that file phpinfo() file.
Even for a newbie, this should probably take, like, a half hour? if
everything goes well.
Assuming a decently-powered box. If you're installing on a Pentium1 laptop
or something, those coffee-breaks could turn into lunch and dinner breaks or
something.
*** There may be a better/different way to stop/start Apache on your server.
Just make 100% sure you stopped it and started it again.
--
Like Music? http://l-i-e.com/artists.htm
I'm looking for a PRO QUALITY two-input sound card supported by Linux (any
major distro). Need to record live events (mixed already) to stereo
CD-quality. Soundcard Recommendations?
Software to handle the recording? Don't need fancy mixer stuff. Zero (0)
post-production time. Just raw PCM/WAV/AIFF 16+ bit, 44.1KHz, Stereo
audio-to-disk.