Cara menggunakan download php 7.2 34

The PHP devs are aware of this and will probably fix it in the next 5.4, 5.5 and 5.6 releases. Let us see if they upgrade 5.6.7 and 5.5.23 (i.e. after 5.6.7RC1 and 5.5.23RC1) or wait till 5.6.8 and 5.5.24.

PHP 5.3 will not be upgraded anymore by the PHP devs.

Zarabozo

Joined: 08 May 2014
Posts: 2
Location: Mexico City

Posted: Wed 18 Mar '15 11:22 Post subject:

Jan-E:

Thank you very much, once again, for doing this. I'm tied to Apache 2.2 because of mod_perl, which hasn't released a stable versión compatible with Apache 2.4. Your builds help me keep PHP to the latest version with Apache 2.2.

Is there any chance you can teach me to build PHP myself? I do it myself with Apache, MySQL and Perl and I would like very much to have your guide doing it with PHP too. The guide in the PHP website is not very clear and depends on x86 binaries. I hope you can let me know.

Thanks in advance,

Francisco

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Fri 20 Mar '15 7:59 Post subject:

I updated all builds with OpenSSL-fips-1.0.1mJan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Wed 15 Apr '15 17:45 Post subject: Update needed for every PHP as mod_php under Apache 2.4

Quote from the NEWS file of PHP 5.5.24:
Quote:16 Apr 2015, PHP 5.5.24

- Apache2handler:
. Fixed bug #69218 (potential remote code execution with apache 2.4
apache2handler). (Gerrit Venema)

Whether remote execution was possible is not sure. What has been verified: it was possible to let Apache 2.4 segfault (crash) by sending requests from a remote server, if Apache was running PHP 5.3/5.4/5.5/5.6 as mod_php (using php5apache2_4.dll).

I have updated all (TS) versions of PHP 5.3, 5.4.40 and 5.5.24 with this fix. The fix in 5.6.8 will follow as soon as those sources are released. Alternative: my 5.6.8RC1 builds already contain the patch since March 31.

glsmith
Moderator

Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA

Posted: Wed 15 Apr '15 21:42 Post subject: Re: Update needed for every PHP as mod_php under Apache 2.4

Jan-E wrote:it was possible to let Apache 2.4 segfault (crash) by sending requests from a remote server, if Apache was running PHP 5.3/5.4/5.5/5.6 as mod_php (using php5apache2_4.dll)

Only on Apache 2.4? This seems like something that has been happening for a long time and is why many of us moved to running php under mod_fcgid even before Apache 2.4.

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Thu 16 Apr '15 1:02 Post subject:

This specific issue was only for Apache 2.4. I have tried to reproduce it with Apache 2.2, but there were no segfaults.

BTW: it was not OS-specific. I could remotely get Apache on Centos6 segfault as well.

James Blond
Moderator

Joined: 19 Jan 2006
Posts: 7169
Location: Germany, Next to Hamburg

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Thu 16 Apr '15 18:05 Post subject:

With fcgid it is no issue on any OS. With mod_php it is/was an issue on every OS.Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Mon 27 Apr '15 16:32 Post subject:

I upgraded curl in all my builds because the latest releaase fixed some security issues.C0nw0nk

Joined: 07 Oct 2013
Posts: 241
Location: United Kingdom, London

Posted: Sat 16 May '15 14:30 Post subject:

Hey Jan-E i wounder if you know of a soloution to the way PHP 64bit builds also have the same limitations as 32bit builds.

For example i made two scripts.

one will use the "sha1_file" function.

another will use the "filesize" function.

And they both can not process files greater than or equal to 2GB.

http://php.net/manual/en/function.hash-file.php

Quote:Please take note that hash-file will throw error on files >=2GB.

http://php.net/manual/en/function.filesize.php

Quote:Note: Because PHP's integer type is signed and many platforms use 32bit integers, some filesystem functions may return unexpected results for files which are larger than 2GB.

I have not tested with the "ssdeep" extension you compile into your builds and before i do i will wait for your reply maybe it will hold the same result.

If the ssdeep extension does not have this limitation atleast i can use that instead of sha1_file.

As of the filesize function i am still seeking a alternative / soloution on windows.

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Posted: Sat 16 May '15 14:44 Post subject:

PHP5 will have the 32-bits limits forever, even in the 64-bits builds. Try my PHP7 builds.

With respect to the ssdeep extension: I really do not know. Just try it.

C0nw0nk

Joined: 07 Oct 2013
Posts: 241
Location: United Kingdom, London

Posted: Sat 16 May '15 15:01 Post subject:

I would go straight to the PHP7 builds but since they are still dev and not stable i cant use it for production

But as for the ssdeep i will give it a try and let you know fingers crossed for hashing files.

C0nw0nk

Joined: 07 Oct 2013
Posts: 241
Location: United Kingdom, London

Posted: Sat 16 May '15 15:57 Post subject:

ssdeep has the same 2GB max file size limitation it seems

Do you have a link to the latest compiled php7 of yours.

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

Jan-E

Joined: 09 Mar 2012
Posts: 1196
Location: Amsterdam, NL, EU

C0nw0nk

Joined: 07 Oct 2013
Posts: 241
Location: United Kingdom, London

Posted: Sat 16 May '15 17:03 Post subject:

I have not tried at all on PHP7 yet jan instead i have sprung a idea.

My code for getting the "sha1_file" is as follows.

Code:$fname = $_FILES['Filedata']['tmp_name'];
$filesource = sha1_file($fname);

A soloution with the windows command prompt is as follows.

The HashAlgorithm choices: MD2 MD4 MD5 SHA1 SHA256 SHA384 SHA512

Code:CertUtil -hashfile "C:\Users\C0n\Desktop\2GB-file.MP4" SHA1
The output will be :
Code:CertUtil -hashfile "C:\Users\C0n\Desktop\2GB-file.MP4" SHA1
SHA1 hash of file C:\Users\C0n\Desktop\2GB-file.MP4:
b2 a7 df ab 5f c4 fe 65 e3 fc 34 5f 0d 3e 4c 6f 30 13 f2 e6
CertUtil: -hashfile command completed successfully.

I just need to figure out a way to exec to get the hash sum output of command prompt "certutil" with php :/ and that can be my soloution for windows.