PHP 5.2.0 Released!

[Tantawi]

Got this in the mail just now:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The PHP development team is proud to announce the immediate release of PHP 5.2.0. This release is a major improvement in the 5.X series, which includes a large number of new features, bug fixes and security enhancements.

The key features of PHP 5.2.0 include:

* New memory manager for the Zend Engine with improved performance and a more accurate memory usage tracking.
* Input filtering extension was added and enabled by default.
* JSON extension was added and enabled by default.
* ZIP extension for creating and editing zip files was introduced.
* Hooks for tracking file upload progress were introduced.
* Introduced E_RECOVERABLE_ERROR error mode.
* Introduced DateTime and DateTimeZone objects with methods to manipulate date/time information.
* Upgraded bundled SQLite, PCRE libraries.
* Upgraded OpenSSL, MySQL and PostgreSQL client libraries for Windows installations.
* Many performance improvements.
* Over 200 bug fixes.

Security Enhancements and Fixes in PHP 5.2.0:

* Made PostgreSQL escaping functions in PostgreSQL and PDO extension keep track of character set encoding whenever possible.
* Added allow_url_include, set to Off by default to disallow use of URLs for include and require.
* Disable realpath cache when open_basedir and safe_mode are being used.
* Improved safe_mode enforcement for error_log() function.
* Fixed a possible buffer overflow in the underlying code responsible for htmlspecialchars() and htmlentities() functions.
* Added missing safe_mode and open_basedir checks for the cURL extension.
* Fixed overflow is str_repeat() & wordwrap() functions on 64bit machines.
* Fixed handling of long paths inside the tempnam() function.
* Fixed safe_mode/open_basedir checks for session.save_path, allowing them to account for extra parameters.
* Fixed ini setting overload in the ini_restore() function.
All users of PHP, especially those using earlier PHP 5 releases are advised to upgrade to this release as soon as possible. This release also obsoletes the 5.1 branch of PHP.

For users upgrading from PHP 5.0 and PHP 5.1 there is an upgrading guide available at http://www.php.net/UPDATE_5_2.txt, detailing the changes between those releases and PHP 5.2.0.

For a full list of changes in PHP 5.2.0, see the ChangeLog (http:// www.php.net/ChangeLog-5.php#5.2.0).


Ilia Alshanetsky
5.2 Release Manager


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFFSjUoLKekh381/CERAkbWAJ9sYFdxCO3XSBi6TsCx1mec+lgJPACcCPtz
aYsI1OpWDYZOBvXu9iHNVWk=
=DQx2
-----END PGP SIGNATURE-----

--
PHP Announcements Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

[kerplunk]

I just saw! Awesome

I think I'm going to wait a few days before I install this, though. Recently, PHP releases always have some sort of initial oddball bug that needs fixing.

[Ati2]

Zend Optimizer is not yet supported in php 5.2.0, so that's one more reason to wait...

[Chousho]

I saw some mention of unicode in one of the release logs, but is it fully supported yet?

[Tantawi]

Just installed it on my CentOS 3 box, runs great with MySQL5 and Apache2, APC as well.

vBulletin 3.6.2 running great so far

[Dabbler]

Just a note of caution for IIS/isapi users:

http://www.vbulletin.com/forum/showthread.php?t=204522

This PHP ver may not work correctly. Although PHP 5.2 contains a fix for IIS Access Violation errors, CVS releases after the date of the fix were still causing AV errors. See above thread for details.

If anyone has information to the contrary, I for one, would be glad to see it.