PHP.net:
PHP 4.4.2 Released
According to a new post on the main PHP site, they've released the latest version in the 4.4.x series - PHP 4.4.2.

The PHP development team is proud to announce the release of PHP 4.4.2. This release address a few small security issues, and also corrects some regressions that occurred in PHP 4.4.1. All PHP 4 users are encouraged to upgrade to this release.

Further details about this release can be found in the release announcement and the full list of changes is available in the PHP 4 ChangeLog.

Some of the things that this edition/a> fixes includes: HTTP Response Splitting has been addressed in the header() function, an XSS problem inside the error reporting functionality has been removed, and Apache 2 regression with sub-request handling on non-Linux systems has been fixed.

So, head on over and grab this lastest distribution and upgrade today!

Share your thoughts on "PHP 4.4.2 Released..." (0 comments)



Community News:
Andi Gutmans to Speak at SCALE 4x Conference
Ilan wrote in to let us know about a talk that Andi Gutmans, VP of Technology for Zend, is going to give at the upcoming SCALE 4x (Southern California Annual Linux Expo) this year.

Andi Gutmans (Zend Founder and a creator of PHP) will be speaking at SCALE 4x, the 2006 Southern California Linux Expo on Feb 11-12. He will discuss new features in PHP5, as well as planned features for PHP6.

SCALE is a non-profit community run event in Los Angeles, CA. Presenters include Jim Winstead (MySQL), John Terpstra (Samba), Chris Dibona (Google) and more.

You can still sign up and get tickets, but the Early Bird price has passed. Tickets are only $65 USD regular price/$32.50 for students - so you can't go wrong for a few days full of talks from respresentatives of companies like Google, RealNetworks, AMD, Sun, Novell, and, of course, Zend...

Share your thoughts on "Andi Gutmans to..." (0 comments)

Acunetix.com:
Web Site Security Center
Via this post on Nexen.net today, there's a link to this resource from Acunetix - a "Web Site Security Center".

Web site security is possibly today's most overlooked aspect of securing data. Hackers are focusing their efforts on hacking web-based applications - shopping carts, forms, login pages, dynamic content, etc. Web sites are accessible 24 hours a day, 7 days a week and control crucial data since they often link directly to customer databases.

The Web Site Security Center provides information about the most important web attacks, such as SQL injection & Cross site scripting. Besides explaining how they work, the center also provides information on finding and fixing these web vulnerabilities.

The site provides all sorts of resources on the various types of attacks (including cross-site scripting, SQL injection, authentication hacking, and Google hacking). They have a scanner you can download a trial of, but the information the site provides is valuable enough...

Share your thoughts on "Web Site Security..." (0 comments)

Thingoid.com:
Markdown and PHP Markdown Extra Cheat Sheet
From Trevor's blog, thingoid, today, there's
Here's my Markdown. It's great to be able to write in (nearly) plain English - say, for submitting something for print - and being able to dump the same text down into the blog and have it work on the web. Setting aside writing-for-web vs. writing-for-print issues, I find this a great help.

And PHP Markdown Extra adds a few niceties, like Markdown inside HTML block tags, simple tables, and definition lists. It just drops straight into WordPress and away you go.

For more information on Markdow (or it's use in PHP), you can check out the Markdown manual first and the PHP one to follow up...

Share your thoughts on "Markdown and PHP..." (0 comments)

Community News:
Surreptitious Link Placement on PHPFreaks.com
Both Vidyut Luther and Tobias Schlitt have noticed an unfortunate trend with the PHP portal site, PHPFreaks.com - the surreptitious placement of advertising links in text that was never meant to have it.

From Vidyut:

I got an email this morning from PHPfreaks.com. The email announced the availability of 5.1.2. So, I decided to click the link just to see what was new. As I was reading the article, I clicked on the word PHP. I noticed that this link took me to www.serverpowered.com. Strange I thought, so I looked at some other links. Basically, the first paragraph, and any instance of the word PHP, is automatically hyperlinked to the serverpowered.com.

And, from Tobias:

As Vidyut pointed out, phpfreaks.com seems to automatically create a link everywhere on their website, where the word "PHP" appears. They do this even in user comments. Apparently this seems to be a nice service, if the link would direct you to php.net (or maybe some explaination page or something). But instead they link to some hosting provider which supports PHP (what also well known as a "sponsored link").

They both note that having sponsorship is okay, but when it starts to interfere with the content of the site, placing links in comments/text where it wasn't wanted, there might be some issues with that...

Share your thoughts on "Surreptitious Link Placement..." (1 comments)

Sebastian Bergmann's Blog:
PHPUnit Talk at PHP Usergroup Munich
Sebastian Bergmann has a quick note on his blog about a talk he's giving at a user group meeting in Munich.

I will visit the PHP Usergroup Munich on February, 22 2006 and give a presentation on PHPUnit. The event takes place in the Munich office of their site...
Share your thoughts on "PHPUnit Talk at..." (0 comments)

Davey Shafik's Blog:
A Year in Retrospect
On his blog today, Davey Shafik has his personal look back at his year in 2005 and what kinds of things he accomplished.

Just like Last Year I'm jumping on the bandwagon again.

Despite the fact that it is hard to top some of the feats I managed last year (I for one, am not planning to marry anybody else!) it has been a very productive and exciting year for me.

Of the things he mentions, here's a few of the more memorable ones:

So, thanks to Davey, especially for all his work - especially on the PHAR/PHP_Archive project - it's already proved invaluable to the community as a whole...

Share your thoughts on "A Year in..." (0 comments)

Professioanl PHP Blog:
Building a culture of objects in PHP
From the Professionl PHP Blog today, there's a followup post to his Why isn't PHP the natural successor to Java? post previously - a look at some of the items mentioned in the Zend Framework, branching into a discussion of PHP's object capabilities.

Joshua Eichorn (among others) notices that active record can't work as shown in the Zend Framework webcast. The syntax presented during the web cast is not possible in PHP because of inherited static methods are treated. Mike Naberezny notes the problem and suggests that it will end up getting fixed in PHP, the sitepoint thread Trouble in Zend Framework Land?, 33degrees smells vaporware, and Elizabeth Marie Smith does too.

I look at this incident as an incredibly good omen. My optimism about Zend's PHP framework is not for the framework itself, but for what it means for OO support in PHP. In my book, the more developers that have commit access to both ZPF and to PHP, the better PHP 6 will be for me. I look at ZPF as an important step in building a culture of objects in the PHP community.

He continues, talking more about how object-oriented languages are still popping up right and left, and how PHP, at its core, needs an OO layer built on top to compare. He's not looking to belittle the OOP support in PHP, just to note that there's more work to be done - and the Zend Framework might be what pushed the development of that along...

Share your thoughts on "Building a culture..." (0 comments)



 All content copyright, 2005 PHPDeveloper.org :: enygma@phpdeveloper.org