php 4.3.10 & 5.0.3 Released

[jmstacey]

php4 Changelog: http://www.php.net/ChangeLog-4.php#4.3.10

php5 Changelog:http://www.php.net/ChangeLog-5.php#5.0.3

These are maintenance releases that in addition to non-critical bug fixes address several very serious security issues.

http://www.php.net

[cyril]

We've just upgraded to 4.3.10, but stumbled on a lot of errors ('illegal offset type...') with scripts that were working fine before. After upgrading the Zend Optimizer to 2.5.7 everything is working fine again.

[interfasys]

Was the DA apache builder updated?

[The Prohacker]

I would recommend not upgrading

http://bugs.php.net/bug.php?id=31134

[markus]

From here: http://bugs.php.net/bug.php?id=31134
Upgrade Zend Optimizer and it fixes it.
From here: http://bugs.php.net/bug.php?id=31108
Not a bug in PHP then, but in the Zend Optimizer. In case you encounter this problem, please upgrade to the latest version of the Zend Optimizer!The solution is to ensure that your ZendOptimizer has been upgraded to a minimum of 2.5.7...
However... while the latest version of PHP is already 4.3.10 (fast move btw), the latest version of ZendOptimizer up in the DA files site is still 2.5.5
http://files.directadmin.com/services/customapache

:rolleyes:

[jmstacey]

You can modify the build file and just have it install the binary from zend which is what DA uses.
http://www.zend.com/store/free_download.php

[Mystical]

I'm using Apache2 and PHP wont update how do i fix this?

checking for AOLserver support... no
checking for Apache 1.x module support via DSO through APXS... configure: error: You have enabled Apache 1.3 support while your server is Apache 2. Please use the appropiate switch --with-apxs2

*** There was an error while trying to configure php. Check the configure.php file

[vandal]

i edited the zend file in build but i am getting this error:

./build zend
File already exists: .tar.gz

gzip: stdin: unexpected end of file
tar: Child returned status 1
tar: Error exit delayed from previous errors

Location of php.ini:
/usr/local/lib
Press return to continue...

./build: ./install.sh: No such file or directory


anyone know how to fix it?

[vandal]

nevermind, did ./built update and then re-edited the update script and it works now.

[Chrysalis]

yeah I emailed john about the new php but forgot to tell him that zend needs updating also.

[hostpc.com]

Wow, massive errors with this upgrade :(

Thanks for the heads up before I pushed it to all servers :(

Joe

[markus]

BTW, this method also works to allow the build script to work with latest version of Zend Optimizer.
http://www.directadmin.com/forum/showthread.php?s=&threadid=6057

1) Upload ZendOptimizer v2.5.7 to the unofficial-upgrades directory.

2) ./build update (if necessary to get the new PHP 4.3.10 file)

3) Since build has been upgraded as well, edit it and check version numbers again (PNG_VER=1.2.8, ZEND_VER=2.5.7, GD_VER=2.0.33, GD config parameters ?).

4) Also add the code into getFile() function (see above link) to deal with the unofficial-upgrades dir.

5) ./build php
6) ./build zend

Steps 3/4 are only required after doing a build update.

Feel free to critique. :rolleyes:

[l0rdphi1]

Note that ionCube does not have a working loader for PHP 4.3.10. This means that Installatron and any other ion-encoded application will not work with PHP versions newer than 4.3.9.

As soon as ionCube has a working loader Installatron will support PHP 4.3.10.

Phi1.

[mattbates]

From these posts, I get the impression it's best to hold off on the 4.3.10 upgrade?

Matt

[Icheb]

Originally posted by l0rdphi1
Note that ionCube does not have a working loader for PHP 4.3.10. This means that Installatron and any other ion-encoded application will not work with PHP versions newer than 4.3.9.

As soon as ionCube has a working loader Installatron will support PHP 4.3.10.

Phi1.
Did do an update, and both Installatron, and other apps are working fine...
Although I get a permissions error while updating Installatron on 1 server (from older beta to newest beta).

(had to chmod +x the index.html files in the different dirs).

[l0rdphi1]

Originally posted by Icheb
Did do an update, and both Installatron, and other apps are working fine...
Although I get a permissions error while updating Installatron on 1 server (from older beta to newest beta).

(had to chmod +x the index.html files in the different dirs).
That is odd. I updated PHP and installed the beta loader provided by ionCube, but it appears like PHP is not loading file contents using the file_get_contents function.

I'll look into this issue and try to pin exactly what is causing the issues I'm experiancing.

Phi1.

[California]

As of this morning (at least) the standard DA ./build update included php 4.10 and Zend 2.5.7.

http://files.directadmin.com/services/customapache/

[rhoekman]

I get the UebiMiau! login interface and when I try to log in I get:

System message: Error connecting to the server

Now nothing has changed to the config files and it worked perfectly. The config files is pointing to the mail server with pop3.

The only thing that has changed was the version of PHP (4.3.10). New version of Zend (v2.5.7) is also installed. Mail server is up and running and I can retrieve my mail via my mail client.

Any ideas where to look?

[California]

Does UebiMiau! use ionCube? If so, you will need to update ionCube manually (I think).

[rhoekman]

No it does not use Ioncube.. The reason I mentioned Zend is when you not upgrade Zend along with PHP it will break all kinds of stuff just to rule that out.

[Chrysalis]

problem confirmed tried it on one of my server's.

There were errors in the process

Please login again

System message: Error connecting to the server

[jstrzalko]

I had no problem upgrading to 4.3.10 and zend 2.5.7. Uebemail (or however you spell it) works fine too.

Did you maybe not upgrade zend?

--Josh

[rhoekman]

@jstrzalko: Can you actually login? About Zend please read previous post of mine

[interfasys]

Ioncube for 4.3.10
http://www.ioncube.com/php4.3.10_issues.php?sid=11df7540582544f6029064b1e8d12be1

[jstrzalko]

Yea I just logged in just now to verify. I even tried logging in with a user for the first time.

https://admin.eleet-tech.com/test.php

--Josh

[California]

I just checked, and I can log in fine to UebiMiau on my FreeBSD 4.9 server after upgrading PHP and Zend.

I wonder what's different between my server and rhoekman's and Chrysalis's?

[rhoekman]

I'm running FreeBSD 5.3 RELEASE

[jstrzalko]

can you post a phpinfo() of your setup? maybe something is just not right.....or the problem could be completely unrelated. :)

--Josh

[rhoekman]

Sorry I won't. Call me paranoid but putting system information of a production server with version numbers of software on a public forum is in my opinion not a good idea.

[jstrzalko]

then PM it to me, or email it to me josh AT eleet-tech.com, if you feel comfortable doing that.

--Josh

[Chrysalis]

my server is also FreeBSD 5.3, so that seems to be linked to the problem. rhoekman it worked ok on 5.3 with php 4.3.9?

PHP 4.3.10 (cli) (built: Dec 16 2004 11:57:07)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies
with Zend Extension Manager v1.0.6, Copyright (c) 2003-2004, by Zend Technologies
with Zend Optimizer v2.5.7, Copyright (c) 1998-2004, by Zend Technologies

[Chrysalis]

tested on FreeBSD 5.2.1 also doesnt work.

[Chrysalis]

DA uses version 2.7.2 of UebMiau but there is a Version 2.7.8 RC1 , however I cannot download it as the official download link doesnt work, has anyone got this version?

[Chrysalis]

I got hold of the new version from here

http://www.uebimiau.org/downloads/uebimiau-2.7.8-RC1-any.zip

However the same error occurs.

[rhoekman]

Originally posted by Chrysalis
my server is also FreeBSD 5.3, so that seems to be linked to the problem. rhoekman it worked ok on 5.3 with php 4.3.9?


Yes, it did work with 4.3.9

(Sorry for my delay in responses I'm very busy but will check up here whenever I find the time..)

[andyl]

Chrysalis,

Just one more datapoint: I'm running FreeBSD 5.2.1 with PHP 4.3.10 and not having any problems with UebiMiau. I am not running Zend.

Let me know if there's anything you want to compare between our systems.

andy

[rhoekman]

Ok, if someone has a freebsd 5.3 release box. Compile php without Zend and see if it will work. After that compile it with Zend and see if it still does. I'm not seeing anything in the logs and my (only) guess at the moment is that Zend is in the way here.

[Chrysalis]

I wouldnt mind trying if I knew how to get rid of zend, since I installed it every new php has zend built in now.

[Chrysalis]

never mind I commented out the lines in php.ini and restarted apache but still no go, you mean zend extension manager or just zend optimiser?

PHP 4.3.10 (cli) (built: Dec 22 2004 12:21:50)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies
with Zend Extension Manager v1.0.6, Copyright (c) 2003-2004, by Zend Technologies
with Zend Optimizer v2.5.7, Copyright (c) 1998-2004, by Zend Technologies

[rhoekman]

You can edit the build script in /usr/local/directadmin/customapache

Look for ZEND_VER=2.5.7 and comment it out. Then rebuild php. Probably gives some errors.

[rhoekman]

I think if you delete configure.php do a

./build clean
./build update
./build all

would also build php but without Zend.

[interfasys]

Did this PHP upgrade break DA for anybody? I tried to upgrade to 1.23.3 and it failed. First time ever.

[jmstacey]

No problems here. php 4.3.10, zend 2.5.7, and DA 1.23.3
Although running FreeBSD 4.10

I did notice that almost all php scripts were broken without updating zend (even though the scripts didn't use zend)

./build does not build zend by default, in order to update/install you must specifically call ./build zend otherwise it does not update zend.

[Chrysalis]

Well I tested the webmail without zend optimiser and it still dont work, and as I cant get php 4.3.9 to compile I take rhoekman's word for it that it worked with 4.3.9. Zend extension manager I think is always compiled as part of php.

[sander815]

someone tested this on RH9?

[tribal-dolphin]

Originally posted by sander815
someone tested this on RH9?
Yes, me.
And it's ok !! => My PHPINFO (http://s1.tribal-dolphin.net/phpinfo.php)

[sander815]

sorry, i meant the 4.3.10 update :)

[jlasman]

Originally posted by interfasys
Did this PHP upgrade break DA for anybody? I tried to upgrade to 1.23.3 and it failed. First time ever.
We've done a lot of these over the last few days.

We had it fail on one server, so we ammended how we did it:
cd /usr/local/directadmin/customapache
rm -f configure.apache_ssl
./build update
./build clean
./build all y
./build zend
This starts with a clean slate and appears to work perfectly.

That 'y' answers yes to all the questions to rebuild everything during the build all stage, so we can start a lot of them at the same time.

Jeff

[jlasman]

Originally posted by sander815
sorry, i meant the 4.3.10 update :)
We've done it successfully on a few RHL9 systems.

See the commands we use in my prior response to this thread.

Jeff

[sander815]

thx for that

why did it fail on one server?

[rhoekman]

Okay to come back to the webmail problems we have with UebiMiau. I was wondering if anything changed or needs to be installed to use the fsockopen(): in php. Is this a default enabled instruction? If not do you need to enable it in php.ini to activate it? Or is it a compile option?

As far as I can tell on the server it is not able to open a socket locally to connect to the mailserver.

[jlasman]

Originally posted by sander815
why did it fail on one server? [/B]
No idea, but httpd stopped right after it started.

So we read the readme and found some notes, and then ran build without any arguments to see what it did and how to call it.

Then we reworked how we'd do the updates.

Using the method I posted above all the machines rebuilt perfectly.

(We haven't tried any Virtuozzo systems yet, but I probably will before Christmas.)

Jeff

[jlasman]

Originally posted by rhoekman
Okay to come back to the webmail problems we have with UebiMiau.
I'm not sure what you mean, rhoekman.

I have no problems running UebiMiau after doing the updates.

I'm running various flavors of RHL; you're running FreeBSD; I'm not sure if that makes a difference.

Jeff

[rhoekman]

Yes there where a couple of people on BSD machines having trouble (read back in the posts). I'm opening a seperate thread for it because this is getting messy now. I've opened it up here: http://www.directadmin.com/forum/showthread.php?s=&threadid=6240

[AleSSaNDRo]

But the staff when version with php moves to release one modernized to the last version???!?!
They do not understand it that all are creating alone problems... those that they use directadmin, therefore, have the situated ones bugged -. -

[torp]

So I've just downloaded the most recent PHP 4.3.10 to my server, and I want to upgrade my PHP. I haven't altered anything on my initial DA box from June which uses 4.3.07.

I do:

./build clean
./build update
./build make

and that should update my PHP correctly? Am I right?

Should I then upgrade Zend afterwords, or will that happen as well?

Using RH9

[vandal]

you will want to do

./build php

instead of ./build make

you will have to build zend by

./build zend

after all that

[AleSSaNDRo]

The staff of DirectAdmin is enjoying the vacations and we have php much bugged :(

[torp]

I actually don't get this right...

I untar my PHP tar.gz file. Then I cd to dir where the unzipped files are, and write ./build php

I get './build is a directory'

So I try to enter /build, but then I get './build: no such file or directory'

What am I doing wrong?

[hostpc.com]

It's REALLY not that difficult - DA's made it VERY easy for you to upgrade.

Using any RH distro, use this:

cd /usr/local/directadmin/customapache
./build update
./build php
./build zend
service httpd restart


Done.

[torp]

So I don't even have to download the most recent PHP to the box to upgrade?

[hostpc.com]

the customapache script will get all the predesigned RPM's from DA and install them directly.

It takes less than 5 minutes to run this script

[torp]

Didn't know about this.

What software can I upgrade with this script? Only PHP and Zend, or Apache, MySQL, Exim, cURL, SSL, etc. as well?

[hostpc.com]

*************************************
* *
* DirectAdmin WebServices Installer *
* *
*************************************

To build everything run:
./build all

Other options:
./build php
./build apache_mod_ssl
./build gd
./build libjpeg
./build libpng
./build zlib
./build curl
./build mcrypt
./build mhash
./build zzip
./build mod_perl
./build mod_frontpage #dso depreciated
./build frontpage_ext
./build webalizer
./build zend (not included with 'all')

Apache 2 options (beta):
./build update_data_ap2
./build convert
./build apache_2
./build php_ap2
./build mod_frontpage_ap2
./build mod_perl_ap2

Remove old build data:
./build clean


Get lastest build script and data
./build update

[PCONLINE]

Hi,
i have this problem with our own server after installed apache ver2


[root@bb1 customapache]# service httpd restart
Stopping httpd: [FAILED]
Starting httpd: Syntax error on line 68 of /etc/httpd/conf/httpd.conf:
Cannot load /usr/lib/apache/mod_perl.so into server: /usr/lib/apache/mod_perl.so: undefined symbol: apr_bucket_shared_split
[FAILED]
[root@bb1 customapache]#

any help would be appreciated.
thanks.

yours truly,
Simon

[torp]

The server load was so big, I had to stop Apache and MySQL to do the build. But after upgrading and starting the services again, everything was working fine.

And the attacks have disappeared.

[torp]

To prevent further DoS attacks, I've found an Apache mod that looks very useful. However, I have some problems with my settings to install this mod.

You'll find the mod (DoS Evasive) at http://www.linuxforum.com/linux_tutorials/66/1.php

I don't think DSO was compiled into Apache with the standard DA install. So I guess I have to rebuild Apache. How would I go about doing this with the ./build in customapache?

Would cd /usr/local/directadmin/customapache | /.build apache -add-module=/usr/local/src/mod_dosevasive/mod_dosevasive.c work?

Currently, after having re-installed PHP 4.10 with the most recent Zend, etc. and upgraded my PhpBBs, I still have the attacks slowing down my server. Every time I restart Apache, the server load goes down to about 0.30, but afte about 30-60 mins after having restarted it, it's up to 40 again, and rising. So I restart again. But I can't keep on doing this the whole night, so I'd rather have the attacks kicked.

Any suggestions are appreciated! ...also if you have some other idea, rather than/together with mod_dosevasive.

Thanks!

[hostpc.com]

If you're using the APF firewall, just use the AntiDos feature in it... it works great :)

[vandal]

apf for the win

[dan35]

php 4.3.10 working fine.

php -v
PHP 4.3.10 (cli) (built: Dec 17 2004 11:03:40)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies


But after I typed this line:
./build zend
....
Location of php.ini:
/usr/local/lib
Press return to continue...

/usr/libexec/ld-elf.so.1: Shared object "libm.so.2" not found, required by "php"

OS: FreeBSD 5.3

[dan35]

Never mind!

[torp]

Originally posted by hostpc.com
If you're using the APF firewall, just use the AntiDos feature in it... it works great :)

Sounds like the easier solution - I'm using the lokkit firewall.

How do I change to the APF firewall? I can't find any APF-stuff on my box. Where do I get it? Easy to use?

- Using RH9

[hostpc.com]

http://www.directadmin.com/forum/showthread.php?s=&threadid=4873&highlight=apf


Lookit is terrible, IMHO... you'll be much better off with APF.

Joe

[torp]

Thanks! Seems to be working great!

I'll open up my lokkit firewall completely now, right? Don't need it anymore...? Or am I better off with both? They're opening the same ports...

[hostpc.com]

Get rid of it - it wasn't meant for a server environment anyway :)

[torp]

Thanks for all the great help in this forum!

My load average is still 14:19:59 up 1 day, 22 min, 1 user, load average: 2.94, 3.41, 4.58 This is a bit high, isn't it?

And when I'm looking into netstat -a, there are still some strange addresses listed.

But my websites are not slow anymore.

[torp]

My php.ini file seems to have been reset.

First of all, all my sessions are stored in /tmp -leading to a lot of stuff in there, and possibly some errors with Squirrelmail and other PHP apps.

Second, My mysql.sock, which used to reside in /var/lib/mysql has now been requested in /tmp as well. So I had to symlink to /var/lib/mysql

Basically, my whole PHP is broken after the upgrade, even though I've recompiled with upgraded Apache, MySQL, Zend, etc.

Standard error everywhere is:

Fatal error: session_start(): Failed to initialize storage module: user (path: /tmp) in /path_to_php_file_where_new_session_is_opened.php

This is a warning to anyone who are going to upgrade. I don't know how this happened, and I'm having huge trouble with it.