From: Mike N. <mh...@us...> - 2003-02-16 20:12:29
|
phpWS team, In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is this a hard requirement or a recommendation? SourceForge is still running PHP 4.1.2. If this is a requirement, SourceForge hosted projects wont be able to upgrade to 0.9x RC4 or greater. Examples of sites hosted on SF using phpWS: http://phpwsthemes.sourceforge.net/ http://phpwsplugins.sourceforge.net/ http://leaf.sourceforge.net/ http://ffl.sourceforge.net/ -- Mike Noyes <mhnoyes @ users.sourceforge.net> http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ http://sitedocs.sf.net/ http://ffl.sf.net/ |
From: Matthew M. <ma...@tu...> - 2003-02-17 16:49:01
|
> In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is this a > hard requirement or a recommendation? SourceForge is still running PHP > 4.1.2. A strong recommendation. You can alter the setup file to allow installation under 4.1.2. The reason we decided upon 4.2.2 was that there was a security issue with multipart encoded forms. Matthew McNaney Internet Systems Architect Electronic Student Services Appalachian State University Phone: 828-262-6493 phpwebsite.appstate.edu ess.appstate.edu |
From: Mike N. <mh...@us...> - 2003-02-18 16:03:15
|
On Mon, 2003-02-17 at 08:59, Matthew McNaney wrote: > > In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is this a > > hard requirement or a recommendation? SourceForge is still running PHP > > 4.1.2. > > A strong recommendation. You can alter the setup file to allow > installation under 4.1.2. The reason we decided upon 4.2.2 was that there > was a security issue with multipart encoded forms. Matt, Just to make sure we're talking about the same security issue I included links below. From what I was able to glean from the security analysis; this problem was introduced in v4.2.0, corrected in v4.2.2, and doesn't affect earlier versions. ref. http://www.php.net/release_4_2_2.php http://security.e-matters.de/advisories/022002.html What is the minimum memory_limit requirement for RC4? I'm aware that you're trying to get it under 8MB for the final release. -- Mike Noyes <mhnoyes @ users.sourceforge.net> http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ http://sitedocs.sf.net/ http://ffl.sf.net/ |
From: Don S. <do...@se...> - 2003-02-18 16:21:03
|
One thing I noticed is in announcements and pagemaster. It's probably in most of the others. In the AnnounceManager class, you have your $_announcements array as a member variable. Then in the listAnnouncements function you populate it with all announcements. Wouldn't this variable stay full since Announcemanager is in the session? Even as I move on to other pages that don't need to do anything with announcements I would be carrying around this potentially large array of announcement objects. Am I wrong in my assumptions? Don. On Tue, 18 Feb 2003, Mike Noyes wrote: > On Mon, 2003-02-17 at 08:59, Matthew McNaney wrote: > > > In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is this a > > > hard requirement or a recommendation? SourceForge is still running PHP > > > 4.1.2. > > > > A strong recommendation. You can alter the setup file to allow > > installation under 4.1.2. The reason we decided upon 4.2.2 was that there > > was a security issue with multipart encoded forms. > > Matt, > Just to make sure we're talking about the same security issue I included > links below. > > >From what I was able to glean from the security analysis; this problem > was introduced in v4.2.0, corrected in v4.2.2, and doesn't affect > earlier versions. > > ref. > http://www.php.net/release_4_2_2.php > http://security.e-matters.de/advisories/022002.html > > What is the minimum memory_limit requirement for RC4? I'm aware that > you're trying to get it under 8MB for the final release. > > |
From: Adam M. <ad...@tu...> - 2003-02-18 16:47:49
|
You are correct, Don. I will go in and do some general session clean up on those modules. Adam > One thing I noticed is in announcements and pagemaster. It's probably > in most of the others. > > In the AnnounceManager class, you have your $_announcements array as a > member variable. Then in the listAnnouncements function you populate it > with all announcements. > > Wouldn't this variable stay full since Announcemanager is in the > session? Even as I move on to other pages that don't need to do > anything with announcements I would be carrying around this potentially > large array of announcement objects. > > Am I wrong in my assumptions? > > Don. > > On Tue, 18 Feb 2003, Mike Noyes wrote: > >> On Mon, 2003-02-17 at 08:59, Matthew McNaney wrote: >> > > In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is >> this a hard requirement or a recommendation? SourceForge is still >> running PHP 4.1.2. >> > >> > A strong recommendation. You can alter the setup file to allow >> installation under 4.1.2. The reason we decided upon 4.2.2 was that >> there was a security issue with multipart encoded forms. >> >> Matt, >> Just to make sure we're talking about the same security issue I >> included links below. >> >> >From what I was able to glean from the security analysis; this >> problem >> was introduced in v4.2.0, corrected in v4.2.2, and doesn't affect >> earlier versions. >> >> ref. >> http://www.php.net/release_4_2_2.php >> http://security.e-matters.de/advisories/022002.html >> >> What is the minimum memory_limit requirement for RC4? I'm aware that >> you're trying to get it under 8MB for the final release. >> >> > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Phpwebsite-developers mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers --------------------------------------------------------------------- Adam Morton Developer - Electronic Student Services http://phpwebsite.appstate.edu Founder - Appalachian Linux Users Group http://alug.appstate.edu |
From: Don S. <do...@se...> - 2003-02-18 16:52:42
|
I noticed because I was following Announce when I was coding my manager. I imagine that a lot of the core modules might behave this way, so that used memory could really add up. Don. On Tue, 18 Feb 2003, Adam Morton wrote: > You are correct, Don. I will go in and do some general session clean up on > those modules. > > Adam > > > One thing I noticed is in announcements and pagemaster. It's probably > > in most of the others. > > > > In the AnnounceManager class, you have your $_announcements array as a > > member variable. Then in the listAnnouncements function you populate it > > with all announcements. > > > > Wouldn't this variable stay full since Announcemanager is in the > > session? Even as I move on to other pages that don't need to do > > anything with announcements I would be carrying around this potentially > > large array of announcement objects. > > > > Am I wrong in my assumptions? > > > > Don. > > > > On Tue, 18 Feb 2003, Mike Noyes wrote: > > > >> On Mon, 2003-02-17 at 08:59, Matthew McNaney wrote: > >> > > In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. Is > >> this a hard requirement or a recommendation? SourceForge is still > >> running PHP 4.1.2. > >> > > >> > A strong recommendation. You can alter the setup file to allow > >> installation under 4.1.2. The reason we decided upon 4.2.2 was that > >> there was a security issue with multipart encoded forms. > >> > >> Matt, > >> Just to make sure we're talking about the same security issue I > >> included links below. > >> > >> >From what I was able to glean from the security analysis; this > >> problem > >> was introduced in v4.2.0, corrected in v4.2.2, and doesn't affect > >> earlier versions. > >> > >> ref. > >> http://www.php.net/release_4_2_2.php > >> http://security.e-matters.de/advisories/022002.html > >> > >> What is the minimum memory_limit requirement for RC4? I'm aware that > >> you're trying to get it under 8MB for the final release. > >> > >> > > > > > > ------------------------------------------------------- > > This sf.net email is sponsored by:ThinkGeek > > Welcome to geek heaven. > > http://thinkgeek.com/sf > > _______________________________________________ > > Phpwebsite-developers mailing list > > Php...@li... > > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers > > > --------------------------------------------------------------------- > Adam Morton > Developer - Electronic Student Services > http://phpwebsite.appstate.edu > Founder - Appalachian Linux Users Group > http://alug.appstate.edu > > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Phpwebsite-developers mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers > > > |
From: Adam M. <ad...@tu...> - 2003-02-18 17:35:49
|
Aye this is an issue that we are trying to address right now along with the notices and other qwirks that might cause phpws to get a little resource happy. Any further insights as to where we bottlenecks or session inflation might be occuring would be very helpful :) Adam > I noticed because I was following Announce when I was coding my manager. > I imagine that a lot of the core modules might behave this way, so > that used memory could really add up. > > Don. > > On Tue, 18 Feb 2003, Adam Morton wrote: > >> You are correct, Don. I will go in and do some general session clean >> up on those modules. >> >> Adam >> >> > One thing I noticed is in announcements and pagemaster. It's >> probably in most of the others. >> > >> > In the AnnounceManager class, you have your $_announcements array as >> a member variable. Then in the listAnnouncements function you >> populate it >> > with all announcements. >> > >> > Wouldn't this variable stay full since Announcemanager is in the >> session? Even as I move on to other pages that don't need to do >> anything with announcements I would be carrying around this >> potentially large array of announcement objects. >> > >> > Am I wrong in my assumptions? >> > >> > Don. >> > >> > On Tue, 18 Feb 2003, Mike Noyes wrote: >> > >> >> On Mon, 2003-02-17 at 08:59, Matthew McNaney wrote: >> >> > > In docs/REQUIREMENTS.txt "PHP v4.2.2 or greater" is specified. >> Is >> >> this a hard requirement or a recommendation? SourceForge is still >> running PHP 4.1.2. >> >> > >> >> > A strong recommendation. You can alter the setup file to allow >> >> installation under 4.1.2. The reason we decided upon 4.2.2 was that >> there was a security issue with multipart encoded forms. >> >> >> >> Matt, >> >> Just to make sure we're talking about the same security issue I >> included links below. >> >> >> >> >From what I was able to glean from the security analysis; this >> >> problem >> >> was introduced in v4.2.0, corrected in v4.2.2, and doesn't affect >> earlier versions. >> >> >> >> ref. >> >> http://www.php.net/release_4_2_2.php >> >> http://security.e-matters.de/advisories/022002.html >> >> >> >> What is the minimum memory_limit requirement for RC4? I'm aware >> that you're trying to get it under 8MB for the final release. >> >> >> >> >> > >> > >> > ------------------------------------------------------- >> > This sf.net email is sponsored by:ThinkGeek >> > Welcome to geek heaven. >> > http://thinkgeek.com/sf >> > _______________________________________________ >> > Phpwebsite-developers mailing list >> > Php...@li... >> > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers >> >> >> --------------------------------------------------------------------- >> Adam Morton >> Developer - Electronic Student Services >> http://phpwebsite.appstate.edu >> Founder - Appalachian Linux Users Group >> http://alug.appstate.edu >> >> >> >> >> ------------------------------------------------------- >> This sf.net email is sponsored by:ThinkGeek >> Welcome to geek heaven. >> http://thinkgeek.com/sf >> _______________________________________________ >> Phpwebsite-developers mailing list >> Php...@li... >> https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers >> >> >> > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Phpwebsite-developers mailing list > Php...@li... > https://lists.sourceforge.net/lists/listinfo/phpwebsite-developers --------------------------------------------------------------------- Adam Morton Developer - Electronic Student Services http://phpwebsite.appstate.edu Founder - Appalachian Linux Users Group http://alug.appstate.edu |