I am currently running w2P 3.0 on CentOS 6. I downloaded, extracted and prepared the 3.1 package but when opening the 'install' page was greeted with the error that PHP 5.3.8 was required. My up-to-date CentOS 6 server has PHP 5.3.3. I checked the requirement for both w2P 2.4 and 3.0 and it's PHP 5.2.0 in each case. So, - Why 5.3.8 instead of 5.3.0? - Why do a major update of PHP requirement on a minor version update of w2P? - Why choose a PHP version that leaves those users running an enterprise grade OS like RHEL stranded and unable to perform a minor update? - Why is this not documented? (everything still says 5.2) - Is there any solution to this or must I just bide my time waiting for RedHat to approve & release PHP 5.3.8? - Will w2P have shifted the goal post again by then? I will not install a non-core PHP package on my server. Stephen Jones

asked 27 Feb '14, 05:35

lloydsystems's gravatar image

lloydsystems
16122
accept rate: 0%

asked 27 Feb '14, 05:35


The minimum php version is hard coded in base.php line 20.\nI'd suggest changing it to 5.3.0 and give it a go. Cheers, Sasquatch
permanent link

answered 28 Feb '14, 19:23

sasquatch58's gravatar image

sasquatch58
211133
accept rate: 11%

answered 28 Feb '14, 19:23

  • 5.3.8 has significant performance improvements over 5.3.0 by itself. In addition, versions prior to 5.3.7 had a security issue with bcrypt - http://php.net/security/crypt_blowfish.php
  • You are correct that I should not have updated the version on a minor release. But I did it for multiple reasons.. First, the logs showed that a tiny percentage of the users were on <= 5.3.8. Next, sticking with the 5.2 line was holding us back from integrating a good deal of functionality through libraries using composer and namespaces. Finally and most importantly, we could not stick with 5.2 any longer as it's no longer supported
  • http://www.php.net/releases/#5.2.17 - and security fixes are no longer being backported.
  • With all due respect, it's CentOS that has left you stranded on a piece of software 3.5 years old and no longer supported - http://www.php.net/ChangeLog-5.php#5.3.3
  • It wasn't documented because I haven't had a chance to do it.
  • Hopefully Redhat will not approve 5.3.8 as 5.3.x itself has been EOL'd and received its last planned update as of December 2013. I hope they jump directly to 5.4 or better 5.5 in which case web2project itself will be the lagging app.
  • Yes, the goal post will shift. I will make sure it only shifts on major releases.

In summary, it was poor form of me to update the minimum version on a minor release and without documenting it. That said, we need to stay up to date with both a) the security status of the underlying PHP versions and b) the functionality that we can gain/improve from being more up to date.

Of course, you can work around all of this by changing the line 20 in base.php as Sasquatch58 noted.

And as always, we're here to lend a hand. :)

permanent link

answered 01 Mar '14, 16:28

caseydk's gravatar image

caseydk ♦♦
717243045
accept rate: 31%

edited 29 Dec '16, 11:28

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×5

question asked: 27 Feb '14, 05:35

question was seen: 370 times

last updated: 29 Dec '16, 11:28

powered by Bitnami OSQA