PHP Weekly Summary (Issue 3)

PHP Weekly Summary (Issue 3 : 2000/09/11 - 2000/09/17) ------------------------------------------------------ $cover_myself = include("standard_libel_disclaimer.inc"); Each heading is prefixed by the following - NEW: new code being added. TLK: general talk. BUG: a bug being discussed. FIX: maintenance work. REQ: feature request. Table of Contents: ------------------ FIX: PHP 3.0.17 + 4.0.3 Release Candidates REQ: PHP extension documentation (cont.) BUG: SRADV00001, PHP file upload security vulnerability (cont.) TLK: suggested naming conventions REQ: named output buffers BUG: doc_root problems FIX: PHP 3.0.17 + 4.0.3 Release Candidates ------------------------------------------ Zeev Suraski announced (http://www.geocrawler.com/lists/3/Web/5/500/4321292/) the availability of the first release candidates for the latest iterations of both PHP 3 + 4. Everyone who has the ability to run a test setup might like to try them, so as to ensure the highest quality for the build on release. REQ: PHP extension documentation (cont.) ---------------------------------------- Following on from last weeks discussion, Joey Smith forwarded a message to the list which he received from Andi Gutmans (see it here: http://www.geocrawler.com/lists/3/Web/5/475/4321823/). By the sounds of it, there will be some new documentation available ASAP that will help people with the creation of their extensions. For those who can't wait, Sterling Hughes has his presentation notes for the ApacheCon conference available. (see here: http://conf.php.net/pres/index.php?p=slides%2Fextending&id=apachecon) I personally found them extremely useful. BUG: SRADV00001, PHP file upload security vulnerability (cont.) --------------------------------------------------------------- Zeev Suraski posted a message to the list (see: http://www.geocrawler.com/lists/3/Web/5/450/4322489/ regarding the resolution of the above issue. It is very well written, and i recommend that everyone who hasn't read it yet to do so. TLK: suggested naming conventions --------------------------------- Ron Chmara brought up the issue of current naming conventions, and how they could possibly be improved. (see http://www.geocrawler.com/lists/3/Web/5/325/4329048/). REQ: named output buffers ------------------------- Andrei Zmievski made an interesting post regarding the possibility of multiple output buffers (see http://www.geocrawler.com/lists/3/Web/5/125/4337719/). After a bit of back-and-forthing between Chuck Hagenbuch and Zeev S. though, it seems that there is already support in PHP for this feature. (albeit, the multiple buffers are unnamed). It is also possible to create a callback function that will be executed when output buffering ends, rather then just sending out the contents of the buffer. BUG: doc_root problems ---------------------- A number of users had been reporting problems in 4.0.1pl2 + 4.0.2 regarding doc_root + safe_mode. Andi Gutmans has created a fix for this which is now in CVS, and will make its way into 4.0.3. -- A little bit quieter on the list this week (in terms of discussion anyway) as things wind up (down?) towards the next PHP release. Traffic was less than half of last weeks total, with most of it being the QA team hammering away diligently on getting bugs closed. looking forward to next week 8^), - avi lewin