2 posts tagged “phpsecinfo”

View other items tagged “phpsecinfo:” Photos, Audio, Videos, Books or Links. View “phpsecinfo” on Vox.

PHPSecInfo: New release, new plans

First off, a new build of PHPSecInfo is out: Version 0.1.2, build

20061218. Here’s what’s new:

  • Code is now licensed under “New BSD” license. See LICENSE

  • Added PhpSecInfo_Test_Core_Allow_Url_Include to test for

    • allow_url_include in PHP5.2 and above

  • fix bug in post_max_size check where upload_max_size value was being

    • checked

  • change curl file_support test to recommend upgrading to newest

    • version of PHP rather than disabling support in cURL for ‘file://’
    protocol

  • removed =& calls that force pass by reference in PHP4, so as to not

    • throw PHP5 STRICT notices. It means passing objects by value in PHP4,
    but this seems acceptable for our purposes (memory usage isn’t
    terribly high).

  • Fixed bug in PhpSecInfo_Test_Session_Use_Trans_Sid where wrong ini

    • key was requested (Thanks Mark Wallert)

  • New, detailed README file with explanations and basic usage

    • instructions - Now providing an md5 hash for releases

    Here’s what I’m planning to do in the next few releases:


    1. More detailed test results, including the current and recommended
      2. settings
    2. A web-based “glossary” with more details on each test &
      3. how to fix problems
    3. More tests!!! I especially need your help with
      4. this one!

      I’m also going to look into options to reformat the test result

      structure, so it plays more nicely with templating systems. No
      promises on how this will go, but we’ll see.

      Post a comment Tags: security, php, phpsecinfo

      PHPSecInfo Launched; Celebrity Status Imminent

      So we finally went public with PHPSecInfo as an official project of the PHP Security Consortium.

      http://phpsec.org/about/news/20oct2006.html

      http://phpsec.org/projects/phpsecinfo/

      http://phpdeveloper.org/news/6543

      I just was interviewed by Cal Evans for the Zend Developer Zone, which was pretty cool -- it was nice to talk to him again. He said the story should be posted sometime this weekend or Monday.

      Post a comment Tags: web development, security, php, infosec, phpsecinfo