�����ı仯

PHP �ں�

  • ���ʡ�� salt ������crypt() ����� E_NOTICE����
  • substr_compare() �� length �������ڽ��� 0 ��ֵ��
  • unserialize() will now fail if passed serialised data that has been manipulated to attempt to instantiate an object without calling its constructor.

cURL

  • ֻ������ CURLOPT_SAFE_UPLOAD Ϊ FALSE ������£� �Ž��� @file �﷨�ϴ��ļ��� ���ʹ�� CURLFile ���档

Mcrypt

  • mcrypt_create_iv() �� source ����Ĭ��ֵ�� MCRYPT_DEV_URANDOM������ MCRYPT_DEV_RANDOM��

OpenSSL

  • ��� SSL ������ѡ���Ѿ��ṩ crypto_type ѡ� stream_socket_enable_crypto() ���Ժ��� crypto_type ������

PostgreSQL

Reflection

XMLReader