PHP 5.3.7 Released
php.net
PHP 5.3.7 Released
1–10 of 10 posts
Re: PHP 5.3.7 Released
#2mysqlnd
Fixed crash when using more than 28,000 bound parameters. Workaround is to set mysqlnd.net_cmd_buffer_size to at least 9000. (Andrey)
Whew. Thank goodness that's fixed?
Re: PHP 5.3.7 Released
#3Looks like mostly bug fixes.
Re: PHP 5.3.7 Released
#4High level overview anyone?
Re: PHP 5.3.7 Released
#5High level overview anyone?
just bug fixes basically. 5.4 is coming out soon which has new features and more major changes
Re: PHP 5.3.7 Released
#6High level overview anyone?
http://www.php.net/archive/2011.php#id2011-08-18-1
Upgraded some libraries and fixed a pile of bugs, basically. And PHP 5.2 series is NOT supported anymore.
Re: PHP 5.3.7 Released
#7mysqlnd Fixed crash when using more than 28,000 bound parameters. Workaround is to set mysqlnd.net_cmd_buffer_size to at least 9000. (Andrey) Whew. Thank goodness that's fixed?
Ya seriously, why in the world would you have so many bound parameters?
Re: PHP 5.3.7 Released
#8mysqlnd Fixed crash when using more than 28,000 bound parameters. Workaround is to set mysqlnd.net_cmd_buffer_size to at least 9000. (Andrey) Whew. Thank goodness that's fixed?
This bug really frustrated me. I couldn't figure out how to make a simple blogging application without at least 28,000 bound parameters because the thing kept crashing out.
I'm glad I can now un-hobble my database query and retrieve the full output.
Re: PHP 5.3.7 Released
#9Just bug fixes? If you allow file uploads, you would be wise to upgrade.
Fixed bug #54939 (File path injection vulnerability in RFC1867 File upload filename). Reported by Krzysztof Kotowicz. (CVE-2011-2202)
"The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."
Re: PHP 5.3.7 Released
#10mysqlnd Fixed crash when using more than 28,000 bound parameters. Workaround is to set mysqlnd.net_cmd_buffer_size to at least 9000. (Andrey) Whew. Thank goodness that's fixed?
Ya seriously, why in the world would you have so many bound parameters?
e.g. a Bayesian classifier that updates word counts:
INSERT INTO words(word, spam, ham) VALUES(?, ?, ?),(?, ?, ?),(?, ?, ?),…
ON DUPLICATE KEY UPDATE …