About the Author

Chris Shiflett

Chris Shiflett is an author and speaker who leads the web application security practice at OmniTI.

PHP 5.1.4 Fixes Critical Bug

I haven't seen an official announcement, and it's not mentioned on the downloads page yet, but you can grab PHP 5.1.4 from your favorite mirror.

Presumably, this release comes so soon after 5.1.3 due to the critical bug mentioned on PHPDeveloper.org. I just downloaded and installed it, and the bug seems to be fixed. Thanks, Dmitry!

About This Post

PHP 5.1.4 Fixes Critical Bug was posted on Thu, 04 May 2006 at 05:35:34 GMT.

3 Comments

1. j0k3r's Gravatarj0k3r said:

Damned :)

The file you requested (php-5.1.4.tar.gz) is not found on this server (http://fr2.php.net/).

Thu, 04 May 2006 at 12:57:04 GMT Link

2. cOdH's GravatarcOdH said:

Download from Lithuania :)

http://php.net/get/php-5.1.4.tar.gz....php.net/mirror

Thu, 04 May 2006 at 14:39:02 GMT Link

3. Steve Kurzeja's GravatarSteve Kurzeja said:

It does make you wonder what QA/unit tests are being run against new builds for such a bug to filter out.

Presumbly, the PHP 5.1.3 release was not tested against a slightly more advanced web form POST with array form names.

.

Thu, 04 May 2006 at 20:22:00 GMT Link

Post A Comment

Personal Details and Comment

Style Guide

Line breaks are converted to paragraphs. Also use:

  • <a href="" title="">text</a>1
  • <em>text</em>
  • <blockquote><p>text</p></blockquote>
  • <code>2  <?php  if ($foo) {      $foo = TRUE;  }  ?></code>
  1. Note: <code> can be used inline (e.g. in paragraphs) or in a block as shown. Include whitespace and newlines in blocks.

Please enter Chris (my first name) below. This is a primitive spam prevention technique, and I apologize for the inconvenience.

Preview and Submit

Upcoming Talks

php|works / PyWorks

12 - 14 Nov 2008

At Sheraton Gateway Hotel Atlanta Airport, Atlanta, Georgia.

New Comments

Dave wrote:

Hi Seth, I'm experiencing exactly the same problem as you have. Have you fixed it? How?

Posted in
Matt Robinson wrote:

Wotcha Chris, thanks for the tip about headers in the web inspector, I hadn't noticed them! (Actu...

Posted in Inspecting and Hacking HTTP
Stelian Mocanita wrote:

Not much I know so far, didn't get far with debugging it to get as far as http headers but I know...

Posted in Facebook Worm
Chris Shiflett wrote:

Yes, good point. The message this worm sends is really just a phishing attack, and Facebook is do...

Posted in Facebook Worm
yawnmoth wrote:

Given that Samy required no action on the users part, above and beyond viewing an infected users ...

Posted in Facebook Worm

Browse Comments