A framework for developing PHP web applications Maintained by:glarkin@FreeBSD.org Port Added: 07 Nov 2006 16:59:41 License: not specified in port
This is a port of the Zend Framework. The Zend Framework aims to
provide an architecture for developing entire applications with no
other library dependencies. This code will always be actively developed,
tested, and supported by Zend and the PHP Collaboration Project.
WWW: http://framework.zend.com/
Reason:
A local file inclusion (LFI) vulnerability was fixed in Zend Framework
1.7.5. The LFI was present in the Zend_View::render() method, and
allowed inclusion of scripts with relative path names, e.g.
"../../../my/script/dir/myscript.php".
If the script path name is hard-coded into the application and is not
generated by user input, the vulnerability does not apply. Because of
this exception, the Zend Framework team has added a flag to disable
the LFI protection in the render() method.
Full details of the vulnerability, whether it applies to your
application and how to disable the LFI protection in the render()
method can be found here:
http://framework.zend.com/manual/en/zend.view.migration.html
Number of commits found: 60
Commit History - (may be incomplete: see CVSWeb link above for full details)
- Removed php5-pcre dependency since it's part of the PHP base port now
- Added MySQLi dependency configuration option
- Bumped PORTREVISION
PR: ports/129698
Submitted by: Till Klampaeckel <till at php dot net>
- Fix dependencies that are moved into php5 core distribution
PR: ports/109064
Submitted by: Alexander Zhuravlev <zaa at zaa.pp.ru>
Approved by: Greg Larkin <glarkin at sourcehosting.net> (maintainer)
This is a port of the Zend Framework. The Zend Framework aims to
provide an architecture for developing entire applications with no
other library dependencies. This code will always be actively developed,
tested, and supported by Zend and the PHP Collaboration Project.
WWW: http://framework.zend.com/
- Greg Larkin
glarkin@sourcehosting.net
PR: ports/105094
Submitted by: Greg Larkin <glarkin at sourcehosting.net>
