$Id: UPGRADING 322438 2012-01-18 10:07:46Z mike $ UPGRADE NOTES - PHP 5.4 1. Changes made to default configuration 2. Reserved words and classes 3. Changes made to engine behaviour 4. Changes made to existing functions 5. Changes made to existing methods 6. Changes made to existing classes 7. Deprecated 8. Removed 9. Extensions: a. with changed behaviour b. no longer possible to disable 10. Changes in SAPI support 11. Changes in INI directives 12. Syntax additions 13. Windows support 14. New in PHP 5.4: a. New functions b. New global constants c. New classes d. New methods e. New class constants f. New hash algorithms ======================================== 1. Changes made to default configuration ======================================== - The default_charset setting now defaults to UTF-8. It was ISO-88590-1 before, so if you were relying on the default, you will need to add: default_charset = iso-8859-1 to your php.ini to preserve pre-5.4 behavior. - We now check at compile time if /dev/urandom or /dev/arandom are present to provide non-blocking entropy to session id generation. If either is present, session.entropy_file now defaults to that file and session.entropy_length defaults to 32. If you do not want extra entropy for your session ids for some reason, add: session.entropy_file= session.entropy_length=0 to your php.ini to preserve pre-PHP5.4 behavior. - Deprecated ini directives will now throw an E_CORE_WARNING's instead of the previous E_WARNING's. The following directives are marked as deprecated: - magic_quotes_gpc - magic_quotes_runtime - magic_quotes_sybase - The following directives, which indicates a removed feature in PHP will now throw an E_CORE_ERROR upon startup like the deprecation warnings. The following directives are no longer available: - allow_call_time_pass_reference - define_syslog_variables - highlight.bg - register_globals - register_long_arrays - safe_mode - safe_mode_gid - safe_mode_include_dir - safe_mode_exec_dir - safe_mode_allowed_env_vars - safe_mode_protected_env_vars - zend.ze1_compatibility_mode - the following new directives were added - max_input_vars - specifies how many GET/POST/COOKIE input variables may be accepted. default value 1000. ============================= 2. Reserved words and classes ============================= - "callable", "insteadof" and "trait" are reserved words now. =================================== 3. Changes made to engine behaviour =================================== - It's now possible to enforce the class' __construct arguments in an abstract constructor in the base class. abstract class Base { abstract public function __construct(); } class Foo extends Base { public function __construct($bar) {} } Now emits a Fatal error due the incompatible declaration. - In previous versions, names of superglobals could be used for parameter names, thereby shadowing the corresponding superglobal. This now causes a fatal error such as "Cannot re-assign auto-global variable GLOBALS". - Turning null, false or empty string into an object by adding a property will now emit a warning instead of an E_STRICT error. $test = null; $test->baz = 1; To create a generic object you can use StdClass: $test = new StdClass; $test->baz = 1; - Converting array to string now will cause E_NOTICE warning. - Chained string offsets - e.g. $a[0][0] where $a is a string - now work. - Non-numeric string offsets - e.g. $a['foo'] where $a is a string - now return false on isset() and true on empty(), and produce warning if trying to use them. Offsets of types double, bool and null produce notice. Numeric strings ($a['2']) still work as before. Note that offsets like '12.3' and '5 and a half' are considered non-numeric and produce warning, but are converted to 12 and 5 respectively for BC reasons. - Changed E_ALL to include E_STRICT. - Closures now support scopes and $this and can be rebound to objects using Closure::bind() and Closure::bindTo(). - Added multibyte support by default. Now it can be enabled or disabled through zend.multibyte directive in php.ini. - 1; it doesn't merely decrement the resource refcount. - socket_set_options() and socket_get_options() now support multicast options. - The raw data parameter in openssl_encrypt()/openssl_decrypt() is now an options integer rather than a boolean. A value of true produces the same behaviour. - Write operations within XSLT (for example with the extension sax:output) are disabled by default. You can define what is forbidden with the method XsltProcess::setSecurityPrefs($options). - Added AES support to OpenSSL. - openssl_csr_new() expects the textual data to be in UTF-8. - Added no padding option to openssl_encrypt()/openssl_decrypt(). - Added a "no_ticket" SSL context option to disable the SessionTicket TLS extension. - Added new json_encode() options: JSON_PRETTY_PRINT, JSON_UNESCAPED_SLASHES, JSON_NUMERIC_CHECK, JSON_BIGINT_AS_STRING, JSON_UNESCAPED_UNICODE. - Added Tokyo Cabinet and Berkley DB 5 support to DBA extension. - Added support for CURLOPT_MAX_SEND_SPEED_LARGE and CURLOPT_MAX_RECV_SPEED_LARGE to cURL. - Added optional argument to debug_backtrace() and debug_print_backtrace() to limit the amount of stack frames returned. - Fixed crypt_blowfish handling of 8-bit characters. crypt() in Blowfish mode now supports hashes marked $2a$, $2x$, $2y$ and $2z$. - mbstring now supports following encodings: Shift_JIS/UTF-8 Emoji, JIS X0213:2004 (Shift_JIS-2004, EUC-JP-2004, ISO-2022-JP-2004), MacJapanese (Shift_JIS), gb18030. - Added encode/decode in hex format to mb_[en|de]code_numericentity(). - Added support for SORT_NATURAL and SORT_FLAG_CASE in array sort functions (sort, rsort, ksort, krsort, asort, arsort and array_multisort). - is_a() and is_subclass_of() now have third boolean parameter, which specifies if the first argument can be a string class name. Default if false for is_a and true for is_subclass_of() for BC reasons. - ob_start() will now treat a chunk size of 1 as meaning 1 byte, rather than the previous special case behaviour of treating it as 4096 bytes. - idn_to_ascii() and idn_to_utf8() now take two extra parameters, one indicating the variant (IDNA 2003 or UTS #46) and another, passed by reference, to return details about the operation in case UTS #46 is chosen. - gzencode() used with FORCE_DEFLATE now generates RFC1950 compliant data. - ob_start() refuses to start multiple output buffers at once passed as array("callback1", "callback2", "callback3", ...). =================================== 5. Changes made to existing methods =================================== - DateTime::parseFromFormat() now has + modifier to allow trailing text in the string to parse without throwing an error. - Added the ability to pass options to DOMDocument::loadHTML(). - FilesystemIterator, GlobIterator and (Recursive)DirectoryIterator now use the default stream context. =================================== 6. Changes made to existing classes =================================== - Classes that implement stream wrappers can define a method called stream_truncate that will respond to truncation, e.g. through ftruncate. Strictly speaking, this is an addition to the user-space stream wrapper template, not a change to an actual class. - Classes that implement stream wrappers can define a method called stream_metadata that will be called on touch(), chmod(), chgrp(), chown(). - Arrays cast from SimpleXMLElement now always contain all nodes instead of just the first matching node. - All SimpleXMLElement children are now always printed when using var_dump(), var_export(), and print_r(). - Added iterator support in MySQLi. mysqli_result implements Traversable. ============= 7. Deprecated ============= - get_magic_quotes_gpc() - get_magic_quotes_runtime() - mcrypt_generic_end() - mysql_list_dbs() ========== 8. Removed ========== a. removed features - magic quotes . remove magic_quotes_gpc, magic_quotes_runtime, magic_quotes_sybase (calling ini_set('magic_....') returns 0|false . get_magic_quotes_gpc, get_magic_quotes_runtime are kept but always return false . set_magic_quotes_runtime raises an E_CORE_ERROR - register_globals - register_long_arrays - Safe mode - Session extension bug compatibility mode - y2k_compliance mode b. removed ini directives - define_syslog_variables - register_globals - register_long_arrays - safe_mode - safe_mode_gid - safe_mode_include_dir - safe_mode_exec_dir - safe_mode_allowed_env_vars - safe_mode_protected_env_vars - session.bug_compat42 - session.bug_compat_warn - y2k_compliance c. removed functions - define_syslog_variables() - import_request_variables() - session_is_registered() - session_register() - session_unregister() - mysqli_bind_param() (alias of mysqli_stmt_bind_param()) - mysqli_bind_result() (alias of mysqli_stmt_bind_result()) - mysqli_client_encoding() (alias of mysqli_character_set_name()) - mysqli_fetch() (alias of mysqli_stmt_fetch()) - mysqli_param_count() (alias of mysqli_stmt_param_count()) - mysqli_get_metadata() (alias of mysqli_stmt_result_metadata()) - mysqli_send_long_data() (alias of mysqli_stmt_send_long_data()) - mysqli::client_encoding() (alias of mysqli::character_set_name) - mysqli_stmt::stmt() (never worked/always throws, undocumented) d. removed syntax - break $var; - continue $var; e. removed hash algorithms - Salsa10 and Salsa20, which are actually stream ciphers ============= 9. Extensions ============= a. no longer maintained - ext/sqlite b. with changed behaviour - The MySQL extensions (ext/mysql, mysqli and PDO_mysql) use mysqlnd as the default library now. It is still possible to use libmysql by specifying a path to the configure options. - PDO_mysql: Support for linking with MySQL client libraries older than 4.1 is removed. - The session extension now can hook into the file upload feature in order to provide upload progress information through session variables. - SNMP extension - Functions in SNMP extension now returns FALSE on every error condition including SNMP-related (no such instance, end of MIB, etc). Thus, in patricular, breaks previous behaviour of get/walk functions returning an empty string on SNMP-related errors. - Multi OID get/getnext/set queries are now supported. - New constants added for use in snmp_set_oid_output_format() function. - Function snmp_set_valueretrieval() changed it's behaviour: SNMP_VALUE_OBJECT can be combined with one of SNMP_VALUE_PLAIN or SNMP_VALUE_LIBRARY resulting OID value changes. When no SNMP_VALUE_PLAIN or SNMP_VALUE_LIBRARY is supplied with SNMP_VALUE_OBJECT, SNMP_VALUE_LIBRARY is used. Prior to 5.4.0 when no SNMP_VALUE_PLAIN or SNMP_VALUE_LIBRARY was supplied with SNMP_VALUE_OBJECT, SNMP_VALUE_PLAIN was used. - Added feature-rich OO API (SNMP class) - Dropped UCD-SNMP compatibility code. Consider upgrading to net-snmp v5.3+. Net-SNMP v5.4+ is required for Windows version. - In sake of adding support for IPv6 DNS name resolution of remote SNMP agent (peer) is done by extension now, not by Net-SNMP library anymore. - Date extension - Setting the timezone with the TZ environment variable is no longer supported, instead date.timezone and/or date_default_timezone_set() have to be used. - The extension will no longer guess the default timezone if none is set with date.timezone and/or date_default_timezone_set(). Instead it will always fall back to "UTC". ========================== 10. Changes in SAPI support ========================== - Added built-in CLI web server that is intended for testing purposes. - The REQUEST_TIME value inside server now returns a floating point number indicating the time with microsecond precision. All SAPIs providing this value should be returning float and not time_t. - apache_child_terminate(), getallheaders(), apache_request_headers() and apache_response_headers() now supported on FastCGI. - Added shortcut #inisetting=value to change ini settings at run-time. - Changed shell not to terminate on fatal errors. - Interactive shell works with shared readline extension. - Added command line option --rz which shows information of the named Zend extension. - PHP-FPM now supports syslog value for error_log. ============================= 11. Changes in INI directives ============================= - Recommended production value for error_reporting changed to E_ALL & ~E_DEPRECATED & ~E_STRICT. - Added session.upload_progress.enabled, session.upload_progress.cleanup, session.upload_progress.prefix, session.upload_progress.name, session.upload_progress.freq, session.upload_progress.min_freq. - Added zend.multibyte directive as a replacement of PHP compile time configuration option --enable-zend-multibyte. Now ZE always contains code for multibyte support, but may enable or disable it by zend.multibyte. It doesn't make a lot of sense to enable this option without ext/mbstring, because the most functionality is implemented by mbstrings callbacks. - Added enable_post_data_reading, which is enabled by default. When it's disabled, the POST data is not read (and processed); the behavior is similar to that of other request methods with body, like PUT. This allows reading the raw POST data in multipart requests and read/process the POST data in a stream fashion (through php://input), without having it copied in memory two/ three times. - A new directive, called windows_show_crt_warning, has been introduced. This directive shows the CRT warnings when enabled. These warnings were displayed by default until now. It is disabled by default. - Added cli.pager php.ini setting to set a pager for CLI output. - Added cli.prompt php.ini setting to configure the CLI shell prompt. - Added process.max to control the number of process FPM can fork. ==================== 12. Syntax additions ==================== - Traits: trait HelloWorld { public function sayHello() { echo 'Hello World!'; } } class CanIGetHello { use HelloWorld; } $hello = new CanIGetHello(); $hello->sayHello(); - Function call result array access: e.g. foo()[0] $foo->bar()[0] - Callable typehint, argument must be callable (i.e. pass is_callable($arg, false)) example: function foo(callable $do) { } foo("strcmp"); foo(function() {}); $o = new ArrayObject(); foo(array($o, "count")); - Short array syntax: $a = [1, 2, 3, 4]; $a = ['one' => 1, 'two' => 2, 'three' => 3, 'four' => 4]; $a = ['one' => 1, 2, 'three' => 3, 4]; - Binary number format: 0b00100 0b010101 - $str[1][0] where $str is a string is now a legal construct. - Anonymous functions now support using $this and class scope. Anonymous function can be declared as "static" to ignore the scope. - Class::{expr}() syntax is now supported: class A { static function foo() { echo "Hello world!\n"; } } $x = "f"; $y = "o"; A::{$x.$y.$y}(); - Class member access on instantiation: (new foo)->method() (new foo)->property (new foo)[0] =================== 13. Windows support =================== - is_link now works properly for symbolic links on Windows Vista or later. Earlier systems do not support symbolic links. =================== 14. New in PHP 5.4: =================== a. New functions - Core: - get_declared_traits() - getimagesizefromstring() - hex2bin() - header_register_callback() - http_response_code() - stream_set_chunk_size() - socket_import_stream() - trait_exists() - Intl: - transliterator_create() - transliterator_create_from_rules() - transliterator_create_inverse() - transliterator_get_error_code() - transliterator_get_error_message() - transliterator_list_ids() - transliterator_transliterate() - LDAP: - ldap_control_paged_results() - ldap_control_paged_results_response() - libxml: - libxml_set_external_entity_loader() - mysqli: - mysqli_error_list() - mysqli_stmt_error_list() - Session: - session_register_shutdown() - session_status() - SPL - class_uses() b. New global constants - CURLOPT_MAX_RECV_SPEED_LARGE - CURLOPT_MAX_SEND_SPEED_LARGE - ENT_DISALLOWED - ENT_HTML401 - ENT_HTML5 - ENT_SUBSTITUTE - ENT_XHTML - ENT_XML1 - IPPROTO_IP - IPPROTO_IPV6 - IPV6_MULTICAST_HOPS - IPV6_MULTICAST_IF - IPV6_MULTICAST_LOOP - IP_MULTICAST_IF - IP_MULTICAST_LOOP - IP_MULTICAST_TTL - JSON_BIGINT_AS_STRING - JSON_OBJECT_AS_ARRAY - JSON_PRETTY_PRINT - JSON_UNESCAPED_SLASHES - JSON_UNESCAPED_UNICODE - LIBXML_HTML_NODEFDTD - LIBXML_HTML_NOIMPLIED - LIBXML_PEDANTIC - MCAST_JOIN_GROUP - MCAST_LEAVE_GROUP - MCAST_BLOCK_SOURCE - MCAST_UNBLOCK_SOURCE - MCAST_JOIN_SOURCE_GROUP - MCAST_LEAVE_SOURCE_GROUP - OPENSSL_CIPHER_AES_128_CBC - OPENSSL_CIPHER_AES_192_CBC - OPENSSL_CIPHER_AES_256_CBC - OPENSSL_RAW_DATA - OPENSSL_ZERO_PADDING - PHP_OUTPUT_HANDLER_CLEAN - PHP_OUTPUT_HANDLER_CLEANABLE - PHP_OUTPUT_HANDLER_DISABLED - PHP_OUTPUT_HANDLER_FINAL - PHP_OUTPUT_HANDLER_FLUSH - PHP_OUTPUT_HANDLER_FLUSHABLE - PHP_OUTPUT_HANDLER_REMOVABLE - PHP_OUTPUT_HANDLER_STARTED - PHP_OUTPUT_HANDLER_STDFLAGS - PHP_OUTPUT_HANDLER_WRITE - PHP_QUERY_RFC1738 - PHP_QUERY_RFC3986 - PHP_SESSION_ACTIVE - PHP_SESSION_DISABLED - PHP_SESSION_NONE - SCANDIR_SORT_ASCENDING - SCANDIR_SORT_DESCENDING - SCANDIR_SORT_NONE - SORT_FLAG_CASE - SORT_NATURAL - STREAM_META_ACCESS - STREAM_META_GROUP - STREAM_META_GROUP_NAME - STREAM_META_OWNER - STREAM_META_OWNER_NAME - STREAM_META_TOUCH - T_CALLABLE - T_INSTEADOF - T_TRAIT - T_TRAIT_C - ZLIB_ENCODING_DEFLATE - ZLIB_ENCODING_GZIP - ZLIB_ENCODING_RAW - U_IDNA_DOMAIN_NAME_TOO_LONG_ERROR - IDNA_CHECK_BIDI - IDNA_CHECK_CONTEXTJ - IDNA_NONTRANSITIONAL_TO_ASCII - IDNA_NONTRANSITIONAL_TO_UNICODE - INTL_IDNA_VARIANT_2003 - INTL_IDNA_VARIANT_UTS46 - IDNA_ERROR_EMPTY_LABEL - IDNA_ERROR_LABEL_TOO_LONG - IDNA_ERROR_DOMAIN_NAME_TOO_LONG - IDNA_ERROR_LEADING_HYPHEN - IDNA_ERROR_TRAILING_HYPHEN - IDNA_ERROR_HYPHEN_3_4 - IDNA_ERROR_LEADING_COMBINING_MARK - IDNA_ERROR_DISALLOWED - IDNA_ERROR_PUNYCODE - IDNA_ERROR_LABEL_HAS_DOT - IDNA_ERROR_INVALID_ACE_LABEL - IDNA_ERROR_BIDI - IDNA_ERROR_CONTEXTJ c. New classes - Reflection: - ReflectionZendExtension - Intl: - Transliterator - Spoofchecker - JSON: - JsonSerializable - Session: - SessionHandler - SNMP: - SNMP - SPL: - CallbackFilterIterator - RecursiveCallbackFilterIterator d. New methods - Closure: - Closure::bind() - Closure::bindTo() - Reflection: - ReflectionClass::getTraitAliases() - ReflectionClass::getTraitNames() - ReflectionClass::getTraits() - ReflectionClass::isCloneable() - ReflectionClass::isTrait() - ReflectionClass::newInstanceWithoutConstructor() - ReflectionExtension::isPersistent() - ReflectionExtension::isTemporary() - ReflectionFunction::getClosure() - ReflectionFunction::getClosureScopeClass() - ReflectionFunction::getClosureThis() - ReflectionFunctionAbstract::getClosureScopeClass() - ReflectionFunctionAbstract::getClosureThis() - ReflectionMethod::getClosure() - ReflectionMethod::getClosureScopeClass() - ReflectionMethod::getClosureThis() - ReflectionObject::getTraitAliases() - ReflectionObject::getTraitNames() - ReflectionObject::getTraits() - ReflectionObject::isCloneable() - ReflectionObject::isTrait() - ReflectionObject::newInstanceWithoutConstructor() - ReflectionParameter::canBePassedByValue() - ReflectionParameter::isCallable() - PDO_dblib: - PDO::newRowset() - SPL: - DirectoryIterator::getExtension() - RegexIterator::getRegex() - SplDoublyLinkedList::serialize() - SplDoublyLinkedList::unserialize() - SplFileInfo::getExtension() - SplFileObject::fputcsv() - SplObjectStorage::getHash() - SplQueue::serialize - SplQueue::unserialize - SplStack::serialize - SplStack::unserialize - SplTempFileObject::fputcsv - XSLT: - XsltProcessor::setSecurityPrefs() - XsltProcessor::getSecurityPrefs() e. New class constants - PDO: - PDO::MYSQL_ATTR_SSL_CA - PDO::MYSQL_ATTR_SSL_CAPATH - PDO::MYSQL_ATTR_SSL_CERT - PDO::MYSQL_ATTR_SSL_CIPHER - PDO::MYSQL_ATTR_SSL_KEY f. New Hash algorithms - fnv132 - fnv164 - joaat