PHP: Hypertext Preprocessor

about 300000~5000000

180

Great show. Can be successful Ji one prosperity and one decline. toil in vain

1

185.85.0.29

PHP:HypertextPreprocessorDownloadsDocumentationGetInvolvedHelpGettingStarted Introduction AsimpletutorialLangueReference Basicsyntax Types Variables Constants Expressions Operators ControlStructures Functions ClassesandObjects Namespaces Enumerations Errors Exceptions Fibers Generators Attributes ReferencesExplained PredefinedVariables PredefinedExceptions PredefinedInterfacesandClasses PredefinedAttributes Contextoptionsandparameters SupportedProtocolsandWrappersSecurity Introduction Generalconsiderations InstalledasCGIbinary InstalledasanApachemodule SessionSecurity FilesystemSecurity DatabaseSecurity ErrorReporting UserSubmittedData HidingPHP KeepingCurrentFeatures HTTPauthenticationwithPHP Cookies Sessions DealingwithXForms Handlingfileuploads Usingremotefiles Connectionhandling PersistentDatabaseConnections Commandlineuse GarbeCollection DTraceDynamicTracingFunctionReference AffectingPHP'sBehiour AudioFormatsManipulation AuthenticationServices CommandLineSpecificExtensions CompressionandArchiveExtensions CryptographyExtensions DatabaseExtensions DateandTimeRelatedExtensions FileSystemRelatedExtensions HumanLangueandCharacterEncodingSupport ImeProcessingandGeneration MailRelatedExtensions MathematicalExtensions Non-TextMIMEOutput ProcessControlExtensions OtherBasicExtensions OtherServices SearchEngineExtensions ServerSpecificExtensions SessionExtensions TextProcessing VariableandTypeRelatedExtensions WebServices WindowsOnlyExtensions XMLManipulation GUIExtensionsKeyboardShortcuts?ThishelpjNextmenuitemkPreviousmenuitemgpPreviousmanpegnNextmanpeGScrolltobottomggScrolltotopghGotohomepegsGotosearch(currentpe)/FocussearchboxApopulargeneral-purposescriptinglanguethatisespeciallysuitedtowebdevelopment.Fast,flexibleandprmatic,PHPpowerseverythingfromyourblogtothemostpopularwebsitesintheworld.What'snewin8.3Download8.3.6·Changelog·Upgrading8.2.18·Changelog·Upgrading8.1.28·Changelog·Upgrading24Apr2024Statementonglibc/iconvVulnerabilityEDIT2024-04-25:ClarifiedwhenaPHPapplicationisvulnerabletothisbug. Recently,abuginglibcversion2.39andolder(CVE-2024-2961)wasuncovered whereabufferoverflowincharactersetconversionsto theISO-2022-CN-EXTcharactersetcanresultinremotecodeexecution. ThisspecificbufferoverflowinglibcisexploitablethroughPHP,whichexposestheiconvfunctionalityofglibctodocharactersetconversioPHP: Hypertext Preprocessornsviatheiconvextension.AlthoughthebugisexploitableinthecontextofthePHPEngine,thebugisnotinPHP.Itisalsonotdirectlyexploitableremotely.Thebugisexploitable,ifandonlyif,thePHPapplicationcallsiconvfunctionsorfilterswithuser-suppliedcharactersets.Applicationsarenotvulnerableif:GlibcsecurityupdatesfromthedistributionhebeeninstalledOrtheiconvextensionisnotloadedOrthevulnerablecharactersethasbeenremovedfromgconv-modules-extra.confOrtheapplicationpassesonlyspecificallyallowedcharactersetstoiconv.Moreover,whenusingauser-suppliedcharacterset,itisgoodpracticeforapplicationstoacceptonlyspecificcharsetsthathebeenexplicitlyallowedbytheapplication.Oneexampleofhowthiscanbedoneisbyusinganallow-listandthearray_search()functiontochecktheencodingbeforepassingittoiconv.Forexample:array_search($charset,$allowed_list,true) Therearenumerousreportsonlinewithtitleslike"Mitigatingthe iconvVulnerabilityforPHP(CVE-2024-2961)"or"PHPUnderAttack".These titlesaremisleadingasthisisnotabuginPHPitself. IfyourPHPapplicationisvulnerable,wefirstrecommendtocheckifyourLinuxdistributionhasalreadypublishedpatchedvariantsofglibc.Debian,CentOS,andothers,healreadydoneso,andpleaseupgradeassoonaspossible.Onceanupdateisailableinglibc,updatingthatpackeonyourLinuxmachinewillbeenoughtoalleviatetheissue.YoudonotneedtoupdatePHP,asglibcisadynamicallylinkedlibrary.IfyourLinuxdistributionhasnotpublishedapatchedversionofglibc,thereisnofixforthisissue.However,thereexistsaworkarounddescribedinGLIBC VulnerabilityonServersServingPHPwhichexplainsawayonhowtoremove theproblematiccharactersetfromglibc.Performthisprocedureforevery gconv-modules-extra.conffilethatisailableonyoursystem. Onceanupdateisailableinglibc,updatingthatpackeonyour Linuxmachinewillbeenoughtoalleviatetheissue.Youdonotneedto updatePHP,asglibcisadynamicallylinkedlibrary. PHPusersonWindowsarenotaffected. TherewillthereforealsonotbeanewversionofPHPforthis vulnerability.12Apr2024PHP8.1.28Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.1.28.Thisisasecurityrelease.AllPHP8.1usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.1.28pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.11Apr2024PHP8.3.6Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.6.Thisisasecurityrelease.AllPHP8.3usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.3.6pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.11Apr2024PHP8.2.18Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.18.Thisisasecurityrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.18pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.14Mar2024PHP8.3.4Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.4.Thisisabugfixrelease.AllPHP8.3usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.3.4pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.14Mar2024PHP8.2.17Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.17.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.17pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.15Feb2024PHP8.2.16Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.16.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.16pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.15Feb2024PHP8.3.3Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.3.Thisisabugfixrelease.AllPHP8.3usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.3.3pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.18Jan2024PHP8.2.15Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.15.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.15pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.18Jan2024PHP8.3.2Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.2.Thisisabugfixrelease.AllPHP8.3usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.3.2pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.21Dec2023PHP8.2.14Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.14.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.14pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.21Dec2023PHP8.1.27Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.1.27.Thisisabugfixrelease.AllPHP8.1usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.1.27pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/dowPHP: Hypertext Preprocessornload/.ThelistofchangesisrecordedintheChangeLog.21Dec2023PHP8.3.1Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.1.Thisisabugfixrelease.AllPHP8.3usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.3.1pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.23Nov2023PHP8.1.26Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.1.26.Thisisabugfixrelease.AllPHP8.1usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.1.26pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.23Nov2023PHP8.3.0Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.3.0.ThisreleasemarksthelatestminorreleaseofthePHPlangue.PHP8.3comeswithnumerousimprovementsandnewfeaturessuchas:TypedClassConstantsFetchclassconstantdynamicallysyntaxReadonlyAmendmentsOverrideAttributeNewRandomizermethodRandom\Randomizer::getBytesFromStringNewfunctionjson_validateAndmuchmuchmore...ForsourcedownloadsofPHP8.3.0pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.ThemigrationguideisailableinthePHPManual.Pleaseconsultitforthedetailedlistofnewfeaturesandbackwardincompatiblechanges.Kudostoallthecontributorsandsupporters!23Nov2023PHP8.2.13Released!ThePHPdevelopmentteamannoPHP: Hypertext PreprocessoruncestheimmediateailabilityofPHP8.2.13.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.13pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.09Nov2023PHP8.3.0RC6ailablefortestingThePHPteamispleasedtoannouncethereleaseofPHP8.3.0,RC6.Thisisthesixthandfinalreleasecandidate,continuingthePHP8.3releasecycle,theroughoutlineofwhichisspecifiedinthePHPWiki.ForsourcedownloadsofPHP8.3.0,RC6pleasevisitthedownloadpe.Pleasecarefullytestthisversionandreportanyissuesfoundinthebugreportingsystem.PleaseDONOTusethisversioninproduction,itisanearlytestversion.Formoreinformationonthenewfeaturesandotherchanges,youcanreadtheNEWSfileortheUPGRADINGfileforacompletelistofupgradingnotes.Thesefilescanalsobefoundinthereleasearchive.Thenextreleasewillbetheproduction-ready,generalailabilityrelease,plannedfor23November2023.ThesignaturesforthereleasecanbefoundinthemanifestorontheQAsite.ThankyouforhelpingusmakePHPbetter.26Oct2023PHP8.1.25Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.1.25.Thisisabugfixrelease.AllPHP8.1usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.1.25pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.26Oct2023PHP8.2.12Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.12.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.12pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.26Oct2023PHP8.3.0RC5ailablefortestingThePHPteamispleasedtoannouncethereleaseofPHP8.3.0,RC5.Thisisthefifthreleasecandidate,continuingthePHP8.3releasecycle,theroughoutlineofwhichisspecifiedinthePHPWiki.ForsourcedownloadsofPHP8.3.0,RC5pleasevisitthedownloadpe.Pleasecarefullytestthisversionandreportanyissuesfoundinthebugreportingsystem.PleaseDONOTusethisversioninproduction,itisanearlytestversion.Formoreinformationonthenewfeaturesandotherchanges,youcanreadtheNEWSfileortheUPGRADINGfileforacompletelistofupgradingnotes.Thesefilescanalsobefoundinthereleasearchive.Thenextreleasewillbethefourthreleasecandidate(RC5),plannedfor26October2023.ThesignaturesforthereleasecanbefoundinthemanifestorontheQAsite.ThankyouforhelpingusmakePHPbetter.12Oct2023PHP8.3.0RC4ailablefortestingThePHPteamispleasedtoannouncethereleaseofPHP8.3.0,RC4.Thisisthefourthreleasecandidate,continuingthePHP8.3releasecycle,theroughoutlineofwhichisspecifiedinthePHPWiki.ForsourcedownloadsofPHP8.3.0,RC4pleasevisitthedownloadpe.Pleasecarefullytestthisversionandreportanyissuesfoundinthebugreportingsystem.PleaseDONOTusethisversioninproduction,itisanearlytestversion.Formoreinformationonthenewfeaturesandotherchanges,youcanreadtheNEWSfileortheUPGRADINGfileforacompletelistofupgradingnotes.Thesefilescanalsobefoundinthereleasearchive.Thenextreleasewillbethefifthreleasecandidate(RC5),plannedfor26October2023.ThesignaturesforthereleasecanbefoundinthemanifestorontheQAsite.ThankyouforhelpingusmakePHPbetter.28Sep2023PHP8.1.24Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.1.24.Thisisabugfixrelease.AllPHP8.1usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.1.24pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.28Sep2023PHP8.3.0RC3ailablefortestingThePHPteamispleasedtoannouncethereleaseofPHP8.3.0,RC3.Thisisthethirdreleasecandidate,continuingthePHP8.3releasecycle,theroughoutlineofwhichisspecifiedinthePHPWiki.ForsourcedownloadsofPHP8.3.0,RC3pleasevisitthedownloadpe.Pleasecarefullytestthisversionandreportanyissuesfoundinthebugreportingsystem.PleaseDONOTusethisversioninproduction,itisanearlytestversion.Formoreinformationonthenewfeaturesandotherchanges,youcanreadtheNEWSfileortheUPGRADINGfileforacompletelistofupgradingnotes.Thesefilescanalsobefoundinthereleasearchive.Thenextreleasewillbethefourthreleasecandidate(RC4),plannedfor12October2023.ThesignaturesforthereleasecanbefoundinthemanifestorontheQAsite.ThankyouforhelpingusmakePHPbetter.28Sep2023PHP8.2.11Released!ThePHPdevelopmentteamannouncestheimmediateailabilityofPHP8.2.11.Thisisabugfixrelease.AllPHP8.2usersareencouredtoupgradetothisversion.ForsourcedownloadsofPHP8.2.11pleasevisitourdownloadspe,Windowssourceandbinariescanbefoundonwindows.php.net/download/.ThelistofchangesisrecordedintheChangeLog.14Sep2023PHP8.3.0RC2ailablefortestingThePHPteamispleasedtoannouncethereleaseofPHP8.3.0,RC2.Thisisthesecondreleasecandidate,continuingthePHP8.3releasecycle,theroughoutlineofwhichisspecifiedinthePHPWiki.ForsourcedownloadsofPHP8.3.0,RC2pleasevisitthedownloadpe.Pleasecarefullytestthisversionandreportanyissuesfoundinthebugreportingsystem.PleaseDONOTusethisversioninproduction,itisanearlytestversion.Formoreinformationonthenewfeaturesandotherchanges,youcanreadtheNEWSfileortheUPGRADINGfileforacompletelistofupgradingnotes.Thesefilescanalsobefoundinthereleasearchive.Thenextreleasewillbethethirdreleasecandidate(RC3),plannedfor28September2023.ThesignaturesforthereleasecanbefoundinthemanifestorontheQAsite.ThankyouforhelpingusmakePHPbetter.OlderNewsEntriesThePHPFoundationThePHPFoundationisacollectiveofpeopleandorganizations,unitedinthemissiontoensurethelong-termprosperityofthePHPlangue.DonateUpcomingconferencesCakeFest2024:TheOfficialCakePHPConferencePHPVelhoOeste2024SymfonyConVienna2024WebSummerCamp2024UserGroupEventsSpecialThanksSocialmedia@official_php@php@fosstodon.org©2001-2024ThePHPGroupMyPHP.netContactOtherPHP.netsitesPrivacypolicyViewSource