Cause: Recently, a multipartform-data vulnerability in php was reported. I used ZendServerCE5.6 and php 5.3.14. There is no official fix for this version. Problem: I want to solve this problem by changing the php source code used in zendserver and re-compiling it... cause:
Recently, php reported a multipart/form-data Vulnerability. I used Zend Server CE 5.6 and php 5.3.14. There is no official fix for this version.
Problem:
Is it feasible to solve this problem by changing the php source code used in zend server and re-compiling it? If this is feasible, can you give a step and use zend server java_bridge and other modules in the system? What should I do?
(Cannot upgrade Zend server, the system is Ubuntu 10.04.4)
Reply content:
Cause:
Recently, php reported a multipart/form-data Vulnerability. I used Zend Server CE 5.6 and php 5.3.14. There is no official fix for this version.
Problem:
Is it feasible to solve this problem by changing the php source code used in zend server and re-compiling it? If this is feasible, can you give a step and use zend server java_bridge and other modules in the system? What should I do?
(Cannot upgrade Zend server, the system is Ubuntu 10.04.4)
Let me answer it myself.
You don't need to consider the java_bridge and other modules mentioned in the question. After installing the php source code used in Zend Server, you can compile and install it according to the normal steps for installing php from the source code.
Possible problems:
1. Do not know the configure Option
You can use php-config -- configure-options to view the previous configure options. You may need to change the configuration values accordingly.
2. software required for compiling environments may be missing
I installed libxml2-dev, openssl-dev, zlib-dev at recompilation.