Jump to content
Pardon our ads (a necessary update) ×

Whats new in PHP 5.6.0 ?


hardhik

Recommended Posts

See the PHP site.

 

There are quite a lot of security improvements:

  • When you download a resource via HTTPS using file_get_contents(), PHP now actually checks the certificate. Before, certificate validation was turned off by default, which is of course a joke and left a lot of applications wide open to man-in-the-middle attacks.
  • The Mcrypt extension no longer accepts incorrect keys or missing initialization vectors.
  • The function hash_equals() allows you to compare secret strings without leaking their content through time differences.
  • 1 year later...

Archived

This topic is now archived and is closed to further replies.



×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.