* Disallow certain characters in session names.
* Fixed a buffer overflow inside the wordwrap() function.
* Prevent jumps to parent directory via the 2nd parameter of the tempnam() function.
* Improved safe_mode check for the error_log() function.
* Fixed cross-site scripting inside the phpinfo() function.
* Fixed offset/length parameter validation inside the substr_compare() function.
* Upgraded bundled PCRE library to version 6.6
* Over 20 various bug fixes.
Approved by: ale's vacation
- Fix compilation of thread-safe PHP after the PTHREAD_LIBS change
- Include md5 and blowfish support on amd64 (fix headers) [1]
- Fix vulnerability in RFC 1867 file upload processing [2]
- Fix php_variables memory disclosure [2]
- GD LZW-GIF support is now enabled by default
PR: ports/71752 [1], ports/72420 [2]
Submitted by: Adam Gregoire <bsdunx@yahoo.com> [1],
Dmitry A Grigorovich <odip@bionet.nsc.ru> [2]
Approved by: portmgr (kris)
o Sync with latest PHP5 changes (new DB4 extension,
use correct knobs, etc...)
PR: ports/57399
Submitted by: Alex Dupre <sysadmin@alexdupre.com> (maintainer)
o Add inifile and cdb extensions.
o Fix imap without ssl(inspired from ports/53141).
o Rename some variable for future compatability (PHP => PHP4)
(inspired from ports/53113, points 1 and 4 - point 2 is useless).
PR: ports/53498
Submitted by: Alex Dupre <sysadmin@alexdupre.com> (maintainer)
Inspired by: ports/53141 (Torsten Schneider <fbsd-bugs@tschneider.org>)
Inspired by: ports/53113 (Jens Rehsack <rehsack@liwing.de>)
to 4.3.2RC4 release and added php4-cli and php4 ports, for apache
module, command line interface, and both, respectively. Too many
changes (improvements, bug fixes and new features) to be listed here,
PR: ports/51945
Submitted by: Alex Dupre <sysadmin@alexdupre.com>
