PHP, which stands for "PHP: Hypertext Preprocessor" is a widely-used Open
Source general-purpose scripting language that is especially suited for
Web development and can be embedded into HTML. Its syntax draws upon C,
Java, and Perl, and is easy to learn. The main goal of the language is to
allow web developers to write dynamically generated webpages quickly, but
you can do much more with PHP.
WWW: http://www.php.net/
===> The following configuration options are available for php52-5.2.17_15:
APACHE=off: Build Apache module
CGI=on: Build CGI version
CLI=on: Build CLI version
DEBUG=off: Install debug symbols
DISCARD=off: discard-path support (CGI only)
FASTCGI=on: fastcgi support (CGI only)
FPM=off: fastcgi process manager (CGI only)
IPV6=on: IPv6 protocol support
LINKTHR=off: Link thread lib (for threaded extensions)
MAILHEAD=off: mail header patch
MULTIBYTE=off: zend multibyte support
PATHINFO=on: path-info-check support (CGI only)
REDIRECT=off: force-cgi-redirect support (CGI only)
SUHOSIN=on: Suhosin protection system
===> Use 'make config' to modify these settings
PHP 5.2 has reached it end-of-life in the FreeBSD Ports Tree, time
to say goodbye. Upstream unsupported it since 2011-01-06 (see
http://php.net/eol.php )
Strip PHP 5.2 out of Mk/bsd.php.mk
Update freetype to 2.5.2.
Remove patch to add -I/usr/local/include in freetype-config --cflags. If
ports need extra headers they should look for them, and not get them via
a side-effect.
Freetype had a header resuffle in 2.5.1, patch ports to use the new header
style.
Thanks go to bdrewery for the two exp-runs and rakuco for helping me with
some troublesome cmake ports.
PR: ports/184587
lang/php5*: Fix spl/simplexml modules (4 ports)
The simplexml module uses spl which uses pcre (php53,54,55). For php52,
the fix is applied directly to spl. In any case, the bundled PCRE is not
used, so it needs to be able to find the external pcre library and related
headers. Unfortunately, there is no include for ${LOCALBASE}/include
directory. This commit adds to fix simplexml (or spl) module build.
Approved by: portmgr (bapt)
- Make ports use the libc provided iconv implementation on 10-CURRENT
after r254273
- Fix a bunch of ports to properly work after this
- Mark converters/libiconv as IGNORE for systems with iconv in libc
Reviewed by: bapt
Approved by: portmgr (bapt)
Discussed with: bapt, bsam (who both contributed ideas and code)
- Fix after convertion to new options framework
PR: ports/179665
Submitted by: Adam McDougall <mcdouga9@egr.msu.edu>
Approved by: Alex Keda <admin@lissyara.su> (maintainer)
Fix installation of ports that rely on cp -n for installing files. r245960
changed cp to exit with a non-zero exit code if the file exists and is not
overwritten thus causing ports to fail installing when e.g. trying to cp
.default -> .conf files that already exist.
We just ignore the error and continue, as we used to.
Reported by: jaset
Approved by: portmgr (bapt)
- Update backports patch to 20121114
- Bump PORTREVISION
Changes:
- CVE-2006-7243
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow
context-dependent attackers to bypass intended access restrictions by placing a
safe file extension after this character, as demonstrated by .php\0.jpg at the
end of the argument to the file_exists function
Secuity 3761df02-0f9c-11e0-becc-0022156e8794 fixed by check in fopen functions
for strlen(filename) != filename_len
- CVE-2012-4388
The sapi_header_op function in main/SAPI.c does not properly determine a pointer
(Only the first 15 lines of the commit message are shown above )
- Update php52 backports patch to 20120911
- Add and update relevant vuxml entries
Changes:
- CVE-2011-1398 - The sapi_header_op function in main/SAPI.c in PHP
before 5.3.11 does not properly handle %0D sequences
- CVE-2012-0789 - Memory leak in the timezone functionality in PHP
before 5.3.9 allows remote attackers to cause a denial of service
(memory consumption) by triggering many strtotime function calls,
which are not properly handled by the php_date_parse_tzfile cache.
- CVE-2012-3365 - The SQLite functionality in PHP before 5.3.15 allows
remote attackers to bypass the open_basedir protection mechanism via
unspecified vectors
- Timezone database updated to version 2012.5 (2012e) (from 2011.13 (2011m))
- Minor improvements (CVE-2012-2688, compilation issues with old GCC)
PR: ports/171583
Submitted by: Svyatoslav Lempert <svyatoslav.lempert@gmail.com>
Approved by: Alex Keda <admin@lissyara.su> (maintainer)
- apply BACKPORTS patch unconditionally and remove BACKPORTS option
- update backports patch to latest version (20120504)
- align pathnames in slave ports
- bump PORTREVISION
The only drawback of this change is that now for building of every slave
port (php extension) we extracting full php52 source tree.
Apologies that it took that long.
PR: 164849
Submitted by: Svyatoslav Lempert <svyatoslav.lempert at gmail dot com>
Approved by: Alex Keda <admin at lissyara dot su>
Security: 60de13d5-95f0-11e1-806a-001143cd36d8
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- change required APACHE version from 13+ to 20+
(prepare to remove www/apache13)
- no PORTREVISION bump since apache22 is the default
with hat apache@
Mark FORBIDDEN the remaining ports that are vulnerable for more than
2 weeks according to portaudit (ranging from 23 days to 7 years).
The maintainers were notified by mail that this action would be taken
on 2011-09-03. (Ports for which maintainers responded have been/will be
dealt with separately.)
Also mark DEPRECATED ports that rely on the FORBIDDEN ports, and a few
ports that rely on those DEPRECATED ports.
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav
Add an option to link against libthr
PR: ports/158423
Submitted by: Frank Wall <fw@moov.de>
Approved by: Alex Keda <admin@lissyara.su> (maintainer), bapt (mentor,
implicit)
- Add optional support for PHP-FPM (FastCGI process manager)
- Add sample configuration file and rc script for PHP-FPM
PR: ports/147688
Approved by: Alex Keda <admin@lissyara.su> (maintainer)
PHP, which stands for "PHP: Hypertext Preprocessor" is a widely-used Open
Source general-purpose scripting language that is especially suited for
Web development and can be embedded into HTML. Its syntax draws upon C,
Java, and Perl, and is easy to learn. The main goal of the language is to
allow web developers to write dynamically generated webpages quickly, but
you can do much more with PHP.
WWW: http://www.php.net/
PR: 145772
Submitted by: Alex Keda
