summaryrefslogtreecommitdiff
path: root/www/php4
AgeCommit message (Collapse)AuthorFilesLines
2006-03-06Increase memory limit when installing PEAR packages. This allows thecube2-5/+9
installation to go through on NetBSD/sparc64 (well, at least mine). Failure reported by Joel Carnat.
2006-03-03Update to version 4.4.2. Ok'd by jdolecek@.cube9-246/+313
This is a bug fix release, which addresses some security problems too. The major points that this release corrects are: * Prevent header injection by limiting each header to a single line. * Possible XSS inside error reporting functionality. * Missing safe_mode/open_basedir checks into cURL extension. * Apache 2 regression with sub-request handling on non-Linux systems. * key() and current() regression related to references. This release also fixes about 30 other defects.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-4/+4
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-2/+2
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig3-7/+7
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-21Allow choosing of CGI or FastCGI as SAPI for the PHP interpreter.joerg1-1/+11
This is done via an option group, default is CGI. Note that the FastCGI interpreter can still be used for normal CGI, but there might be security issues involved in doing so.
2005-11-11PKGBASE is defined too late to be used in PKG_OPTIONS_VAR.rillig1-2/+4
2005-11-08php 4.4.1 has a bug which cause squirrelmail's sort function to misbehave:bouyer3-3/+19
(endless loop): http://bugs.php.net/bug.php?id=35067 Pull in a patch from the php CVS repository to fix this, as suggested a squirrelmail mailing list: http://cvs.php.net/diff.php/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.3&r2=1.543.2.51.2.4&ty=u OK'd by Jaromir Dolecek, tested on apache-1 and apache-2 servers. Bump pkgrevision.
2005-11-05Replaced ${PKGNAME:C...} with the equivalent ${PKGBASE}.rillig1-2/+2
2005-11-04Use --with-openssl=${BUILDLINK_PREFIX.openssl} to specify real pathtv1-2/+2
so that configure won't try to run the (possibly not installed) pkg-config.
2005-11-02Remove obsolete file "include/php/main/config.nw.h" from package list,tron2-3/+3
bump revision.
2005-11-02Remove "XML_RPC-1.4.0.tgz". It is part of PHP 4.4.1 and therefore notron1-5/+1
longer downloaded manually.
2005-11-01Update php to 4.4.1. Besides incorporating XML_RPC-1.4.0 and fopen wrappersjdolecek5-40/+8
security fix, this fixes serious security problems regarding overwriting of the GLOBALS array. All users of PHP 4.3 and 4.4 sare encouradged to update to this version. The --with-regex=system bug with re_magic has been fixed too, so re-enabling use of --with-regex=system for all operating systems again
2005-10-23php regex is also necessary on Linux; pointed out by Ondrej Tumajdolecek1-2/+2
in private e-mail
2005-10-19Bring back the "ssl" option so that the builder may have the *option* totv1-5/+10
turn it off. It's still on by default (in PKG_SUGGESTED_OPTIONS), so no PKGREVISION bump required.
2005-10-16Fix bug in mbstring extension function mb_encode_mimeheader(), whichjdolecek2-1/+15
misinterpreted some Japanese characters as ASCII. PR: 31223 by Takahiro Kambe
2005-10-16use PHP-provided regex on Solaris, PHP doesn't build with system regexjdolecek1-1/+9
there PR: 31047 by Gilles Dauphin
2005-10-08make it possible to switch the IPv6 support on/off via a package option,jdolecek1-2/+11
similarily how this is done in lang/php5/Makefile.php; default depends in USE_INET6 setting, i.e. enabled iff OS supports it
2005-10-08openssl is included unconditionallyjdolecek1-8/+4
2005-10-08fix pluraljdolecek1-2/+2
2005-10-08Unfortunately PHP has several openssl hooks, which are only enabledjdolecek3-4/+8
when the base PHP is compiled with openssl extension (e.g. ssl://, tls:// stream support, and couple others). These don't work when SSL support is loaded via extension. For this reason, make openssl extension unconditionally built-in into the main PHP package, and g/c security/php-openssl.
2005-10-07Add a fix to LDAP extension build to properly detect LDAP capabilities,jdolecek2-1/+14
such as TLS support. Patch provided by Stoned Elipot in private e-mail.
2005-10-05Add patch from Debian bug report 323585 to fix CAN-2005-3054.tron3-2/+19
2005-09-10put back XML_RPC upgrade - the fixed one is 1._4_.0, not 1.3.1jdolecek2-2/+15
2005-09-10PHP 4.4.0 already comes with XML_RPC 1.3.1, so it's not necessary to updatejdolecek2-15/+2
it separately
2005-09-04Move some options that only apply to the PHP CGI package from Makefile.phpjlam2-4/+5
(shared with ap-php) into the php package Makefile.
2005-08-18Use "${GZCAT}" instead of "{GZIP_CMD} -cd".tron1-3/+3
2005-08-17Use per distribution file site list for "XML_RPC-1.4.0.tgz".tron1-7/+7
2005-08-17Define "USE_TOOLS" to make "post-extract" target work on arbitrarytron1-1/+3
configurations. Problem pointed out by Adrian Portelli in private e-mail.
2005-08-17Update "php4" package to version 4.4.0. The update fixes a large numbertron5-12/+30
of bugs discovered since the 4.3.11 release which could e.g. lead to memory corruption. Furthermore integrate version 1.4.0 of PEAR XML_RPC which contains a fix for the "PEAR XML_RPC Remote PHP Code Injection Vulnerability" security problem reported by the Hardened-PHP Project.
2005-06-12g/c the UPGRADE_PKG code - it's no longer used, and the empty 'for'jdolecek1-10/+1
list causes problems with some (e.g. Irix) shells
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-6/+2
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-07do not define MASTER_SITES and EXTRACT_SUFX if PECL_VERSION is set,jdolecek1-1/+4
so that lang/php/ext.php need not use = assignment and extensions would be able to use different setting
2005-04-21Apply cleanly after update to 4.3.11salo2-7/+7
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-04-11doesn't appear to be needed anymorejdolecek1-41/+0
2005-04-11Update php4 to 4.3.11.jdolecek7-176/+96
This is a maintenance release that in addition to over 70 non-critical bug fixes addresses several security issues inside the exif and fbsql extensions as well as the unserialize(), swf_definepoly() and getimagesize() functions. All Users of PHP are strongly encouraged to upgrade to this release. Bugfix release * Crash in bzopen() if supplied path to non-existent file. * DOM crashing when attribute appended to Document. * unserialize() float problem on non-English locales. * Crash in msg_send() when non-string is stored without being serialized. * Possible infinite loop in imap_mail_compose(). * Fixed crash in chunk_split(), when chunklen > strlen. * session_set_save_handler crashes PHP when supplied non-existent object ref. * Memory leak in zend_language_scanner.c. * Compile failures of zend_strtod.c. * Fixed crash in overloaded objects & overload() function. * cURL functions bypass open_basedir. PHP4 also doesn't bundle PEAR Net_Socket and Net_SMTP anymore now.
2005-02-24Add RMD160 checksums.wiz1-1/+2
2004-12-19fix an incorrect test for __ppc__, unbreaking this package on Darwin.grant2-1/+18
2004-12-18claim MAINTAINERjdolecek1-2/+2
2004-12-17php4 4.3.10 already ships with Net_SMTP-1.2.6, so don't bother tryingjdolecek1-2/+2
to update
2004-12-17Update "php" package to version 4.3.10. Changes since version 4.3.9:tron4-9/+8
- Added the %F modifier to *printf to render a non-locale-aware representation of a float with the . as decimal separator. (Derick) - Fixed a bug in addslashes() handling of the '\0' character. (Ilia) - Backported Marcus' foreach() speedup patch from PHP 5.x. (Derick) - Fixed potential problems with unserializing invalid serialize data. (Marcus) - Fixed bug #31034 (Problem with non-existing iconv header file). (Derick) - Fixed bug #31024 (Crash in fgetcsv() with negative length). (Ilia) - Fixed bug #31019 (Logic error mssql library checking). (Frank) - Fixed bug #30995 (snmp extension does not build with net-snmp 5.2). (Ilia) - Fixed bug #30990 (allow popen() on *NIX to accept 'b' flag). (Ilia) - Fixed bug #30826 (Certain reference relations cannot be unserialized properly). (Ilia) - Fixed bug #30750 (Meaningful error message when upload directory is not accessible). (Ilia) - Fixed bug #30739 (imagefill does not set back alphablending mode). (Pierre) - Fixed bug #30672 (Problem handling exif data in jpeg images at unusual places). (Marcus) - Fixed bug #30658 (Ensure that temporary files created by GD are removed). (Ilia) - Fixed bug #30654 (oci8 persistent connection is deleted from hash if there was exclusive connection with the same credentials). (Tony) - Fixed bug #30613 (Prevent infinite recursion in url redirection). (Ilia) - Fixed bug #30587 (array_multisort doesn't separate zvals before changing them). (Tony) - Fixed bug #30475 (curl_getinfo() may crash in some situations). (Ilia) - Fixed bug #30442 (segfault when parsing ?getvariable[][ ). (Tony) - Fixed bug #30388 (rename across filesystems loses ownership and permission info). (Tony) - Fixed bug #30282 (segfault when using unknown/unsupported session.save_handler and/or session.serialize_handler). (Tony) - Fixed bug #30281 (Prevent non-wbmp images from being detected as such). (Ilia) - Fixed bug #30276 (Possible crash in ctype_digit on large numbers). (Ilia) - Fixed bug #30229 (imagerectangle and imagefilledrectangle do work well with alpha channel, corners are drawn twice). (Pierre) - Fixed bug #30224 (Sybase date strings are sometimes not null terminated). (Ilia) - Fixed bug #30133 (get_current_user() crashes on Windows). (Edin) - Fixed bug #30057 (did not detect IPV6 on FreeBSD 4.1). (Wez) - Fixed bug #30027 (Possible crash inside ftp_get()). (cfield at affinitysolutions dot com) - Fixed bug #29805 (HTTP Authentication Issues). (Uwe Schindler) - Fixed bug #29418 (double free when openssl_csr_new fails). (Kamesh Jayachandran). - Fixed bug #28598 (Lost support for MS Symbol fonts). (Pierre) - Fixed bug #28325 (Circular references not properly serialized). (Moriyoshi) - Fixed bug #28228 (NULL decimal separator is not being handled correctly). (Ilia) - Fixed bug #27469 (serialize() objects of incomplete class). (Dmitry)
2004-12-16s,ap-php4,ap-phpjdolecek1-2/+2
2004-12-12completely ignore system php.ini for all pear-related operations; thisjdolecek3-3/+14
is necessary to avoid being subject to e.g. open_basedir or safe_mode settings
2004-12-12abort do-install if pear upgrade failsjdolecek1-2/+2
2004-12-12update the PLIST for the updated Net_SMTP - the newer version installsjdolecek1-1/+11
some extra docs and tests
2004-12-09When apache2 is built with the "worker" MPM, the PHP4 configure scriptjlam2-1/+21
creates its own compiler wrapper script. This "meta_ccld" script isn't recognized by the installed libtool script as a compiler, and libtool gets confused as to which compiler tag to use. Rather than inserting "--tag=CC" into the Makefiles, we patch the configure script to not make the wrapper script, and instead, to simply append the appropriate pthreads CFLAGS to the normal CFLAGS variable subsituted into Makefiles. This fixes PR pkg/28485.
2004-11-27Upgrade bundled Net_Socket to 1.0.2 and Net_SMTP to 1.2.6 on installation.jdolecek3-6/+15
These include some important bug fixes, and some other pear packages require the newer versions. Bump PKGREVISION, and BUILDLINK_RECOMMENDED.
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-26 02:30:08 +0000