Mark Hensler — Fri, 26 Jul 2002 17:42:04 +0000

Ahh drat! I guess I've got to upgrade again.

Thanks for the link, Wil!

Wil — Fri, 26 Jul 2002 17:38:37 +0000

http://www.php.net/release_4_2_2.php

Mark Hensler — Fri, 26 Jul 2002 17:25:07 +0000

Quote: Originally posted by mairving
Case in point is the security vulnerabilites in version 4.2.

I didn't know that. Where can I read more?

I've upgraded on of my machines to 4.2.1 (when it was the latest)... I use .htaccess to set register_globals to on in certain directories, and bada bing! no broken scripts.

zollet — Fri, 26 Jul 2002 14:51:52 +0000

I think it's very important to upgrade to 4.2.x and use PHP's new functions and variables as it would be much better when making new script so that there will be no problems in the future.

mairving — Fri, 26 Jul 2002 11:19:29 +0000

Well there is a patch to make 4.06 more secure. Upgrades can be a nightmare for hosts. They generally weigh what is gained by what is lost by the upgrade. Setting register globals off while more secure will break a lot of scripts. If it is a big deal, get another host. Case in point is the security vulnerabilites in version 4.2. The vulnerability can allow an intruder to execute arbitrary code with the privileges of the web server. It sounds like a big deal but it mostly effects 64bit systems.

Wil — Fri, 26 Jul 2002 08:10:35 +0000

As well as a few major security holes ...