<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Wed, 22 May 2013 02:43:13 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[Omar Abdallah's Blog: Installing LAMP with PHP 5.3.6 on Ubuntu 11.04 Natty Narwhal]]></title>
      <guid>http://www.phpdeveloper.org/news/16388</guid>
      <link>http://www.phpdeveloper.org/news/16388</link>
      <description><![CDATA[<p>
If you're a user of Ubuntu 11.04 (Natty Narwhal) and are needing to get a full LAMP stack up and running, you're in luck. <i>Omar Abdallah</i> has <a href="http://www.omaroid.com/installing-lamp-with-php-5-3-6-on-ubuntu-11-04-natty-narwhal/">put together a guide</a> to help with just that.
</p>
<blockquote>
I wont cover what's new in php 5.3 since it would be another article, however it contains alot of improvements including PHP Namespaces, Late Static Bindings, lambda functions, closures...etc. I would strongly recommend using it. I'll be explaining how to install LAMP stack with PHP 5.3.6 without compiling. It's fairly easy using the dotdeb repository.
</blockquote>
<p>
He steps you through adding the dotdeb package locations to your plist file and pulling down the GPG key for the connection. The rest is a simple "aptitude install" command away, pulling in the apache2, mysql, php5, mcrypt, curl, gd and phpmyadmin packages.
</p>]]></description>
      <pubDate>Thu, 26 May 2011 11:04:36 -0500</pubDate>
    </item>
    <item>
      <title><![CDATA[Hardened-PHP Project: Dotdeb PHP Email Header Injection Vulnerability]]></title>
      <guid>http://www.phpdeveloper.org/news/6704</guid>
      <link>http://www.phpdeveloper.org/news/6704</link>
      <description><![CDATA[<p>
The Hardened PHP Project has released <a href="http://www.hardened-php.net/advisory_142006.139.html">another vulnerability</a> today for the Dotdeb PHP package repository software. The exploit allows for an email header injection.
</p>
<blockquote>
It was discovered that the Dotdeb PHP packages are patched with a mail() protection patch that was originally created by Steve Bennett and is nowadays developed at choon.net. This patch adds an X-PHP-Script header to outgoing mails that contains the name of the server, the script and the calling IP.
</blockquote>
<p>
An example of an attack via <a href="http://www.hardened-php.net/advisory_142006.139.html">this issue</a> would be injecting Bcc: headers into emails with sensitive information, copying them to themselves. The latest version of the package can be downloaded <a href="http://packages.dotdeb.org">from their site</a>. It is suggested that versions less than 5.2.0 Rev 3 upgrade immediately.
</p>]]></description>
      <pubDate>Tue, 14 Nov 2006 14:13:00 -0600</pubDate>
    </item>
  </channel>
</rss>
