Re: Why shouldn't we use PHP 3.0.12

How many times should we answer this email? ----- Original Message ----- From: "A Complete Luser" <acompleteluser@penguinpowered.org.uk> To: <php-general@lists.php.net> Sent: Friday, November 17, 2000 1:14 PM Subject: [PHP] Why shouldn't we use PHP 3.0.12 > Sorry to bug everyone with this, but I could really use some help. > > Background: We are a hosting company hosting some custom applications and > sites for various customers. > > We have one customer, who for several reasons insists that we use PHP > 3.0.12. One of these reasons is that they use Midgard as a content > management tool. > > We are not comfortable doing this as there have been various bugs, > including security ones reported with older versions of PHP. There is > even a piece on the midgard site > (http://www.midgard-project.org/article/1604.html) that states > > Version 3.0.15 is the latest release of PHP. It includes some > important security fixes and also contains many other > improvements. > > I have pointed this and the PHP 3 changelogs out to the client and > used this as motivation to not provide this version of PHP3 for public > access. > > But they are insistent that I either > a) Explain what the problem is with PHP 3.0.12 that prevents us from > using php 3.0.12, in laymans terms. > > or > > b) Go ahead and do it. > > I would really appreciate it if someone here could help me out with > what to tell them. They do not understand the concept of a buffer > overflow, and I see amongst other things, several buffer overflows > fixed since 3.0.12. > > Any assistance would be GREATLY appreciated! > > -- > - A Complete Luser > E-mail: acompleteluser@penguinpowered.org.uk > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > >