Php5 Support Update?

[skater0i]

I'm interested in when PHP5 might be getting implemented on the shared hosting servers. There are a couple threads dating a couple months back that hesitate to give a clear estimate as to when this may happen; I'm curious, has any progress been made since then?

 

Considering the impressive support and pricing this company has to offer, I am not one to complain; however, I do have a few different web sites here, and it would be fantastic if PHP5 were ready and waiting for me when I finish with my latest projects a few months from now ;-)

 

Thanks,

- Jon

[Head Guru]

At this point we have no concrete migration path to PHP5.

 

We recently upgraded to 4.3.10 however.

 

Bill

[Dark]

At this point we have no concrete migration path to PHP5.

 

We recently upgraded to 4.3.10 however.

 

Bill

<{POST_SNAPBACK}>

 

Sometimes exploits are found in programs such as these and those vulnerabilities are just what hackers need. Not saying to upgrade just keep that in mind.

[TCH-Rob]

We also have to keep in mind that with over 31,000 customers, making that kind of upgrade could disable scripts that our customers are running. Jumping into that blindly can be a bad idea.

[Dark]

We also have to keep in mind that with over 31,000 customers, making that kind of upgrade could disable scripts that our customers are running.  Jumping into that blindly can be a bad idea.

<{POST_SNAPBACK}>

 

Ofcouse, I know the phpBB bulletin board software isn't compatible with php5 yet. although there is a modifed one that is. The next official release due out shortly should be compatible.

[Billy]

Yeah, having 31,000 -ish support tickets all at once would probably suck

On a related note, I read that in PHP5, registered globals are off by default. If TCH upgrades, will register globals be set to "off?" That's probably going to be the biggest issue with most people - having to change $varaible to $_REQUEST[variable] in every form script.

[TCH-Rob]

I cant say, but you can enable them in .htaccess I believe.

[borfast]

Billy, you should use register_globals off all the time and make your scripts compatible with it. That's the best way to code PHP. If not for making your scripts more secure, at least it will make them compatible with everyone else, because they will work whether register_globals is on or off and since register_globals will eventually be turned off by web hosts due to possible security implications, I'd say you have nothing to lose, only to gain

[Billy]

Dear Raul -

Thanks for the advice - I will take it seriously. I've heard the same thing from lots of other experts, too!

Thanks,

Billy

[matman]

Dark, you cite that the possibility of exploits being found as a reason to consider upgrading to PHP 5. Keep in mind, however, that upgrading to a newer, less widely-used, and less battle-tested program is hardly a security upgrade! That is why they are still rolling out updates to PHP 4.x to deal with newly-discovered security holes without forcing people to upgrade to the latest and greatest.

[Dark]

Dark, you cite that the possibility of exploits being found as a reason to consider upgrading to PHP 5. Keep in mind, however, that upgrading to a newer, less widely-used, and less battle-tested program is hardly a security upgrade! That is why they are still rolling out updates to PHP 4.x to deal with newly-discovered security holes without forcing people to upgrade to the latest and greatest.

<{POST_SNAPBACK}>

 

My point was, all software is subject to exploits. Say they never upgrade then we will all be vulnerable. I do however understand where they are coming from, I mean I wouldn't want 31,000 support tickets in my inbox. I think things are fine the way they are I was only voicing an opinion.

[Billy]

My point was, all software is subject to exploits. Say they never upgrade then we will all be vulnerable. I do however understand where they are coming from, I mean I wouldn't want 31,000 support tickets in my inbox. I think things are fine the way they are I was only voicing an opinion.

<{POST_SNAPBACK}>

 

I think most of us are looking forward to PHP5 not because it will be "safer," mind you, but because many new functions have been added, including but not limited to str_ireplace(), str_split(), and file_put_contents(). Also, many things have been overhauled, like object handling and XML parsing. On the other hand, it would be fabulous to find out that it is more secure, but that remains to be seen. Probably like you, I am cautiously optimistic.

[matman]

Didn't mean that to sound like a smack-down, Dark -- was just voicing a different perspective.

 

As Bill noted above, TCH is indeed continuing to implement patches to v.4 as needed, since this is a much less laborious process than going from 4 to 5. So it's not as if we're not able to get necessary security updates to PHP 4.

 

And, yes, I am eager to start using PHP 5 myself -- but more eager to keep my sites stable and secure at this point.

[Dark]

Didn't mean that to sound like a smack-down, Dark -- was just voicing a different perspective.

 

As Bill noted above, TCH is indeed continuing to implement patches to v.4 as needed, since this is a much less laborious process than going from 4 to 5. So it's not as if we're not able to get necessary security updates to PHP 4.

 

And, yes, I am eager to start using PHP 5 myself -- but more eager to keep my sites stable and secure at this point.

<{POST_SNAPBACK}>

 

I'd like to use it but right now I'm content with the current version. My forum will not work with php5 at the present.