PHP 5.5.2 PHP开发小组宣布发布。大约20个bug是修复,包括安全问题,OpenSSL中的模块和会话机制问题(CVE-2013-4248)(CVE-2011-4718)。鼓励所有的PHP用户升级到这个版本。
下载:http://www.php.net/downloads.php
修复的内容包括
Core:
Fixed bug #65372 (Segfault in gc_zval_possible_root when return reference fails).
Fixed value of FILTER_SANITIZE_FULL_SPECIAL_CHARS constant (previously was erroneously set to FILTER_SANITIZE_SPECIAL_CHARS value).
Fixed bug #65304 (Use of max int in array_sum).
Fixed bug #65291 (get_defined_constants() causes PHP to crash in a very limited case).
Fixed bug #62691 (solaris sed has no -i switch).
Fixed bug #61345 (CGI mode - make install don't work).
Fixed bug #61268 (--enable-dtrace leads make to clobber Zend/zend_dtrace.d).
DOM:
Added flags option to DOMDocument::schemaValidate() and DOMDocument::schemaValidateSource(). Added LIBXML_SCHEMA_CREATE flag.
OPcache:
Added opcache.restrict_api configuration directive that may limit usage of OPcahce API functions only to patricular script(s).
Added support for glob symbols in blacklist entries (?, *, **).
Fixed bug #65338 (Enabling both php_opcache and php_wincache AVs on shutdown).
Openssl:
Fixed handling null bytes in subjectAltName (CVE-2013-4248).
PDO_mysql:
Fixed bug #65299 (pdo mysql parsing errors).
Phar:
Fixed bug #65028 (Phar::buildFromDirectory creates corrupt archives for some specific contents).
Pgsql:
Fixed bug #62978 (Disallow possible SQL injections with pg_select()/pg_update() /pg_delete()/pg_insert()).
Fixed bug #65336 (pg_escape_literal/identifier() silently returns false).
Sessions:
Implemented strict sessions RFC (https://wiki.php.net/rfc/strict_sessions) which protects against session fixation attacks and session collisions (CVE-2011-4718).
Fixed possible buffer overflow under Windows. Note: Not a security fix.
Changed session.auto_start to PHP_INI_PERDIR.
SOAP:
Fixed bug #65018 (SoapHeader problems with SoapServer).
SPL:
Fixed bug #65328 (Segfault when getting SplStack object Value).
Added RecursiveTreeIterator setPostfix and getPostifx methods.
Fixed bug #61697 (spl_autoload_functions returns lambda functions incorrectly).
Streams:
Fixed bug #65268 (select() implementation uses outdated tick API).
回复讨论(解决方案)
php 5.4.18 已经用上了
PHP 5.5.2 暂时就算了
不确定更换操作系统后,我的bp股票数据源是否还能用
挣钱还是第一位的
那就升级吧,鼓励
几年不见,php增加了很多东西,发现。

ThesecrettokeepingaPHP-poweredwebsiterunningsmoothlyunderheavyloadinvolvesseveralkeystrategies:1)ImplementopcodecachingwithOPcachetoreducescriptexecutiontime,2)UsedatabasequerycachingwithRedistolessendatabaseload,3)LeverageCDNslikeCloudflareforservin

You should care about DependencyInjection(DI) because it makes your code clearer and easier to maintain. 1) DI makes it more modular by decoupling classes, 2) improves the convenience of testing and code flexibility, 3) Use DI containers to manage complex dependencies, but pay attention to performance impact and circular dependencies, 4) The best practice is to rely on abstract interfaces to achieve loose coupling.

Yes,optimizingaPHPapplicationispossibleandessential.1)ImplementcachingusingAPCutoreducedatabaseload.2)Optimizedatabaseswithindexing,efficientqueries,andconnectionpooling.3)Enhancecodewithbuilt-infunctions,avoidingglobalvariables,andusingopcodecaching

ThekeystrategiestosignificantlyboostPHPapplicationperformanceare:1)UseopcodecachinglikeOPcachetoreduceexecutiontime,2)Optimizedatabaseinteractionswithpreparedstatementsandproperindexing,3)ConfigurewebserverslikeNginxwithPHP-FPMforbetterperformance,4)

APHPDependencyInjectionContainerisatoolthatmanagesclassdependencies,enhancingcodemodularity,testability,andmaintainability.Itactsasacentralhubforcreatingandinjectingdependencies,thusreducingtightcouplingandeasingunittesting.

Select DependencyInjection (DI) for large applications, ServiceLocator is suitable for small projects or prototypes. 1) DI improves the testability and modularity of the code through constructor injection. 2) ServiceLocator obtains services through center registration, which is convenient but may lead to an increase in code coupling.

PHPapplicationscanbeoptimizedforspeedandefficiencyby:1)enablingopcacheinphp.ini,2)usingpreparedstatementswithPDOfordatabasequeries,3)replacingloopswitharray_filterandarray_mapfordataprocessing,4)configuringNginxasareverseproxy,5)implementingcachingwi

PHPemailvalidationinvolvesthreesteps:1)Formatvalidationusingregularexpressionstochecktheemailformat;2)DNSvalidationtoensurethedomainhasavalidMXrecord;3)SMTPvalidation,themostthoroughmethod,whichchecksifthemailboxexistsbyconnectingtotheSMTPserver.Impl


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.

MantisBT
Mantis is an easy-to-deploy web-based defect tracking tool designed to aid in product defect tracking. It requires PHP, MySQL and a web server. Check out our demo and hosting services.

ZendStudio 13.5.1 Mac
Powerful PHP integrated development environment

SublimeText3 Chinese version
Chinese version, very easy to use
