Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:24209
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
To: <internals@lists.php.net>
Date: Sun, 25 Jun 2006 11:38:59 +0200
Message-ID: <20060625093859.26255@smtp.haun-online.de>
Organization: Terra Software Systems
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
Subject: Status of PHP 4.4.3?
From: dirk@haun-online.de ("Dirk Haun")

Hi,

I'm wondering what happened to the planned release of PHP 4.4.3. The
original release date (May 30th) has long passed and I haven't seen any
response to Pierre's recent questions about the status of the release.
=46rom what I can see[1], no new release candidates were released either.
Are there any issues preventing this release from happening=3F If so, I
haven't seen them mentioned here.

=46rankly, I find that kind of worrying. PHP 4.4.3 is supposed to fix a
number of security issues that were fixed in PHP 5 eight weeks ago. Many
of our users are still running on PHP 4 which means that they are all
vulnerable and can't do anything about it (usually because their hosting
services don't want to upgrade to PHP 5 for one reason or another).

PHP has been criticised a lot for its security issues in the past, but
it has gotten a lot better over the recent months, thanks to all of your
hard work. Please don't put that at risk by delaying what can only be
described as a critical security update.

If I may add: Sometimes, discussions on this list give the impression
that at least some of you would rather stop developing PHP 5 and move on
to PHP 6 ASAP. While I can understand how attractive this must be,
please don't forget that a lot of us out there in the "real world" are
still dealing with PHP 4, legacy code, and hosting services that don't
even want to upgrade to PHP 5 just yet for fear of breaking their
customer's applications.

So unless the proverbial killer application comes along that makes
everybody switch to PHP 5 by the end of the week, please take into
account that it's not looking like PHP 4 will go away anytime soon, as
much as you may want to leave it behind.

Please note that this is not meant as a "PHP sucks" or "PHP's security
sucks" comment. This is just a friendly reminder that there are people
out there that are still deploying applications that will have to run on
PHP 4 and a plea for not neglecting that part of your user base.

Thanks for your attention.

regards,
Dirk Haun
(Maintainer, Geeklog 1.x)

[1] We're one of the projects on the PhP4zy list; in fact, PHP 4.4.3RC1
is installed on the machine I'm posting this from.


-- 
http://www.geeklog.net/
http://geeklog.info/