PHP 5.5.35 发布,安全补丁版本
PHP 5.5.35 发布了,这是一个安全补丁版本,修复了很多安全相关的问题,所有 PHP 5.5 的用户建议尽快升级。
源码下载请访问 downloads page ,Windows 二进制版本下载 windows.php.net/download/ 。
完整的改进记录请看 ChangeLog 。
-
Core:
-
Fixed bug #69537 (__debugInfo with empty string for key gives error).
-
Fixed bug #71841 (EG(error_zval) is not handled well).
-
BCmath:
-
Fixed bug #72093 (bcpowmod accepts negative scale and corrupts _one_ definition).
-
Curl:
-
Fixed bug #71831 (CURLOPT_NOPROXY applied as long instead of string).
-
Date:
-
Fixed bug #71889 (DateInterval::format Segmentation fault).
-
EXIF:
-
Fixed bug #72094 (Out of bounds heap read access in exif header processing).
-
GD:
-
Fixed bug #71952 (Corruption inside imageaffinematrixget).
-
Fixed bug #71912 (libgd: signedness vulnerability).
-
Intl:
-
Fixed bug #72061 (Out-of-bounds reads in zif_grapheme_stripos with negative offset).
-
OCI8:
-
Fixed bug #71422 (Fix ORA-01438: value larger than specified precision allowed for this column).
-
ODBC:
-
Fixed bug #63171 (Script hangs after max_execution_time).
-
Opcache:
-
Fixed bug #71843 (null ptr deref ZEND_RETURN_SPEC_CONST_HANDLER).
-
PDO:
-
Fixed bug #52098 (Own PDOStatement implementation ignore __call()).
-
Fixed bug #71447 (Quotes inside comments not properly handled).
-
Postgres:
-
Fixed bug #71820 (pg_fetch_object binds parameters before call constructor).
-
SPL:
-
Fixed bug #67582 (Cloned SplObjectStorage with overwritten getHash fails offsetExists()).
-
Standard:
-
Fixed bug #71840 (Unserialize accepts wrongly data).
-
Fixed bug #67512 (php_crypt() crashes if crypt_r() does not exist or _REENTRANT is not defined).
-
XML:
-
Fixed bug #72099 (xml_parse_into_struct segmentation fault).

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics



Alipay PHP...

JWT is an open standard based on JSON, used to securely transmit information between parties, mainly for identity authentication and information exchange. 1. JWT consists of three parts: Header, Payload and Signature. 2. The working principle of JWT includes three steps: generating JWT, verifying JWT and parsing Payload. 3. When using JWT for authentication in PHP, JWT can be generated and verified, and user role and permission information can be included in advanced usage. 4. Common errors include signature verification failure, token expiration, and payload oversized. Debugging skills include using debugging tools and logging. 5. Performance optimization and best practices include using appropriate signature algorithms, setting validity periods reasonably,

Article discusses late static binding (LSB) in PHP, introduced in PHP 5.3, allowing runtime resolution of static method calls for more flexible inheritance.Main issue: LSB vs. traditional polymorphism; LSB's practical applications and potential perfo

Session hijacking can be achieved through the following steps: 1. Obtain the session ID, 2. Use the session ID, 3. Keep the session active. The methods to prevent session hijacking in PHP include: 1. Use the session_regenerate_id() function to regenerate the session ID, 2. Store session data through the database, 3. Ensure that all session data is transmitted through HTTPS.

The application of SOLID principle in PHP development includes: 1. Single responsibility principle (SRP): Each class is responsible for only one function. 2. Open and close principle (OCP): Changes are achieved through extension rather than modification. 3. Lisch's Substitution Principle (LSP): Subclasses can replace base classes without affecting program accuracy. 4. Interface isolation principle (ISP): Use fine-grained interfaces to avoid dependencies and unused methods. 5. Dependency inversion principle (DIP): High and low-level modules rely on abstraction and are implemented through dependency injection.

How to automatically set the permissions of unixsocket after the system restarts. Every time the system restarts, we need to execute the following command to modify the permissions of unixsocket: sudo...

How to debug CLI mode in PHPStorm? When developing with PHPStorm, sometimes we need to debug PHP in command line interface (CLI) mode...

Static binding (static::) implements late static binding (LSB) in PHP, allowing calling classes to be referenced in static contexts rather than defining classes. 1) The parsing process is performed at runtime, 2) Look up the call class in the inheritance relationship, 3) It may bring performance overhead.
