PHP 5.3.1 released
Nearly five months after the release of PHP 5.3.0, the PHP developers have released the first maintenance update to the 5.3 branch of their popular programming language. The PHP 5.3.1 update focuses on stability and includes approximately 100 bug fixes, some of which are security related.
The latest release features the addition of the "max_file_uploads" INI directive, which can be used to limit the number of file uploads for each request to 20 by default. By limiting the number of uploads per-request, users can prevent possible denial of service (DoS) attacks. Missing sanity checks around EXIF (exchangeable image file format) processing have also been added. The developers advise all users to upgrade to the latest release.
More details about the release can be found in the release announcement and the change log. PHP 5.3.1 is available to download from the project's web site. A migration guide is also provided for users upgrading from PHP 5.2. The PHP code is currently distributed under version 3.01 of The PHP Licence.
- PHP creator leaves Yahoo!, a report from The H.