1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
|
<?xml version="1.0" encoding="ISO-8859-1" ?>
<!DOCTYPE package SYSTEM "http://pear.php.net/dtd/package-1.0">
<package version="1.0" packagerversion="1.4.0a12">
<name>XML_RPC</name>
<summary>PHP implementation of the XML-RPC protocol</summary>
<description>A PEAR-ified version of Useful Inc's XML-RPC for PHP.
It has support for HTTP/HTTPS transport, proxies and authentication.
</description>
<maintainers>
<maintainer>
<user>ssb</user>
<name>Stig Bakken</name>
<email>stig@php.net</email>
<role>lead</role>
</maintainer>
<maintainer>
<user>danielc</user>
<name>Daniel Convissor</name>
<email>danielc@php.net</email>
<role>lead</role>
</maintainer>
</maintainers>
<release>
<version>1.4.0</version>
<date>2005-08-14</date>
<license>PHP License</license>
<state>stable</state>
<notes>* MAJOR SECURITY FIX: eliminate use of eval().
* Using socket_get_status() because stream_get_meta_data() was introduced in 4.3.0, but we need to support 4.2.0. Bug 4805.
</notes>
<filelist>
<file role="php" baseinstalldir="XML" name="RPC.php">
<replace from="@package_version@" to="version" type="package-info"/>
</file>
<file role="php" baseinstalldir="XML/RPC" name="Server.php">
<replace from="@package_version@" to="version" type="package-info"/>
</file>
<file role="php" baseinstalldir="XML/RPC" name="Dump.php">
<replace from="@package_version@" to="version" type="package-info"/>
</file>
<file role="test" name="tests/protoport.php">
<replace from="@package_version@" to="version" type="package-info"/>
</file>
<file role="test" name="tests/test_Dump.php">
<replace from="@package_version@" to="version" type="package-info"/>
</file>
</filelist>
</release>
<changelog>
<release>
<version>1.3.3</version>
<date>2005-07-15</date>
<state>stable</state>
<notes>* Eliminate memory leak by resetting $XML_RPC_xh each time parseResponse() is called. Bug 4780.
* Using socket_set_timeout() because stream_set_timeout() was introduced in 4.3.0, but we need to support 4.2.0. Bug 4805.
</notes>
</release>
<release>
<version>1.3.2</version>
<date>2005-07-07</date>
<state>stable</state>
<notes>* Eliminate path disclosure vulnerabilities by suppressing error messages when eval()'ing.
* Eliminate path disclosure vulnerability by catching bogus parameters submitted to XML_RPC_Value::serializeval().
* In XML_RPC_Server::service(), only call createServerPayload() and createServerHeaders() if necessary. Fixes compatibility issue introduced in Release 1.3.0RC1 for users who set the $serviceNow parameter of XML_RPC_Server() to 0. Bug 4757.
* Change "var $errstring" to "var $errstr". Bug 4582. Was put into CVS version 1.75 of RPC.php but didn't make it into RELEASE_1_3_1.
</notes>
</release>
<release>
<version>1.3.1</version>
<date>2005-06-29</date>
<state>stable</state>
<notes>* Security fix. Update highly recommended!
</notes>
</release>
<release>
<version>1.3.0</version>
<date>2005-06-13</date>
<state>stable</state>
<notes>* Stable release. See earlier releases for changes since 1.2.2.
</notes>
</release>
<release>
<version>1.3.0RC3</version>
<date>2005-05-10</date>
<state>beta</state>
<notes>* When verifying requests against function signatures, if the number of parameters don't match, provide an appropriate message. NOTE: this resolves a path disclosure vulnerability. (Refines the changes made in the last commit.) Bug 4231.
* XML_RPC_Message::getParam() now returns an XML_RPC_Response object upon error. Changed from Release 1.3.0RC2.
* Add the XML_RPC_Value::isValue() method. For testing if an item is an XML_RPC_Value object.
* If XML_RPC_Client::send() is given an incorrect $msg parameter, raise an error with the new XML_RPC_ERROR_PROGRAMMING code and return 0.
* Improve cross-platform operation by using PEAR::loadExtension() instead of dl().
* Use <br /> instead of <br> in XML_RPC_Value::dump().
</notes>
</release>
<release>
<version>1.3.0RC2</version>
<date>2005-05-05</date>
<state>beta</state>
<notes>* If XML_RPC_Message::getParam() is given an incorrect parameter, raise an error with the new XML_RPC_ERROR_INCORRECT_PARAMS code and return FALSE.
* Handle improper requests to XML_RPC_Server::verifySignature(). Bug 4231.
* Try to allow HTTP 100 responses if followed by a 200 response. Bug 4116.
* Help Delphi users by making RPCMETHODNAME an alias for METHODNAME. Request 4205.
</notes>
</release>
<release>
<version>1.3.0RC1</version>
<date>2005-04-07</date>
<state>beta</state>
<notes>* Improve timeout handling for situations where connection to server is made but no response is not received in time. Accomplished via stream_set_timeout(). Request 3963.
* Add Fault Code 6: "The requested method didn't return an XML_RPC_Response object." Request 4032.
* Add the createServerPayload() and createServerHeaders() methods and the $server_payload and $server_headers properties. Request 3121.
* As in earlier versions, if the $serviceNow parameter to XML_RPC_Server() is 0, no data will be returned, but now the new $server_payload and $server_headers properties will be set.
* Convert the parser handle to an integer before using it as an index for $XML_RPC_xh[$parser]. Reduces E_STRICT notices. Bug 3782.
* Add createHeaders() method and $headers property to XML_RPC_Client to make testing easier.
</notes>
</release>
<release>
<version>1.2.2</version>
<date>2005-03-07</date>
<state>stable</state>
<notes>* When using a proxy, add the protocol to the Request-URI, making it an "absoluteURI" as per the HTTP 1.0 spec. Bug 3679.
</notes>
</release>
<release>
<version>1.2.1</version>
<date>2005-03-01</date>
<state>stable</state>
<notes>* Add isset() check before examining the dispatch map. Bug 3658.
</notes>
</release>
<release>
<version>1.2.0</version>
<date>2005-02-27</date>
<state>stable</state>
<notes>* Provide the "stable" release.
* Add package2.xml for compatibility with PEAR 1.4.0.
* For changes since 1.1.0, see the changelogs for the various RC releases.
</notes>
</release>
<release>
<version>1.2.0RC7</version>
<date>2005-02-22</date>
<state>beta</state>
<notes>* Add the setSendEncoding() method and $send_encoding
property to XML_RPC_Message. Request 3537.
* Allow class methods to be mapped using either syntax:
'function' => 'hello::sayHello',
or
'function' => array('hello', 'sayhello'),
Bug 3363.
* Use 8192 instead of 32768 for bytes in fread()
in parseResponseFile(). Bug 3340.
</notes>
</release>
<release>
<version>1.2.0RC6</version>
<date>2005-01-25</date>
<state>beta</state>
<notes>* Don't put the protocol in the Host field of the POST data. (danielc)
</notes>
</release>
<release>
<version>1.2.0RC5</version>
<date>2005-01-24</date>
<state>beta</state>
<notes>* If $port is 443 but a protocol isn't specified in $server, assume ssl:// is the protocol.
</notes>
</release>
<release>
<version>1.2.0RC4</version>
<date>2005-01-24</date>
<state>beta</state>
<notes>* When a connection attempt fails, have the method return 0. (danielc)
* Move the protocol/port checking/switching and the property settings from sendPayloadHTTP10() to the XML_RPC_Client constructor. (danielc)
* Add tests for setting the client properties. (danielc)
* Remove $GLOBALS['XML_RPC_twoslash'] since it's not used. (danielc)
* Bundle the tests with the package. (danielc)
</notes>
</release>
<release>
<version>1.2.0RC3</version>
<date>2005-01-19</date>
<state>beta</state>
<notes>* ssl uses port 443, not 445.
</notes>
</release>
<release>
<version>1.2.0RC2</version>
<date>2005-01-11</date>
<state>beta</state>
<notes>* Handle ssl:// in the $server string. (danielc)
* Also default to port 445 for ssl:// requests as well. (danielc)
* Enhance debugging in the server. (danielc)
</notes>
</release>
<release>
<version>1.2.0RC1</version>
<date>2004-12-30</date>
<state>beta</state>
<notes>* Make things work with SSL. Bug 2489. (nkukard lbsd net)
* Allow array function callbacks (Matt Kane)
* Some minor speed-ups (Matt Kane)
* Add Dump.php to the package (Christian Weiske)
* Replace all line endings with \r\n. Had only done replacements on \n. Bug 2521. (danielc)
* Silence fsockopen() errors. Bug 1714. (danielc)
* Encode empty arrays as an array. Bug 1493. (danielc)
* Eliminate undefined index notice when submitting empty arrays to XML_RPC_Encode(). Bug 1819. (danielc)
* Speed up check for enumerated arrays in XML_RPC_Encode(). (danielc)
* Prepend "XML_RPC_" to ERROR_NON_NUMERIC_FOUND, eliminating problem when eval()'ing error messages. (danielc)
* Use XML_RPC_Base::raiseError() instead of PEAR::raiseError() in XML_RPC_ee() because PEAR.php is lazy loaded. (danielc)
* Allow raiseError() to be called statically. (danielc)
* Stop double escaping of character entities. Bug 987. (danielc)
NOTICE: the following have been removed:
* XML_RPC_dh()
* $GLOBALS['XML_RPC_entities']
* XML_RPC_entity_decode()
* XML_RPC_lookup_entity()
* Determine the XML's encoding via the encoding attribute in the XML declaration. Bug 52. (danielc)
</notes>
</release>
<release>
<version>1.1.0</version>
<date>2004-03-15</date>
<state>stable</state>
<notes>* Added support for sequential arrays to XML_RPC_encode() (mroch)
* Cleaned up new XML_RPC_encode() changes a bit (mroch, pierre)
* Remove "require_once 'PEAR.php'", include only when needed to raise an error
* Replace echo and error_log() with raiseError() (mroch)
* Make all classes extend XML_RPC_Base, which will handle common functions (mroch)
* be tolerant of junk after methodResponse (Luca Mariano, mroch)
* Silent notice even in the error log (pierre)
* fix include of shared xml extension on win32 (pierre)
</notes>
</release>
<release>
<version>1.0.4</version>
<date>2002-10-02</date>
<state>stable</state>
<notes>* added HTTP proxy authorization support (thanks to Arnaud Limbourg)
</notes>
</release>
<release>
<version>1.0.3</version>
<date>2002-05-19</date>
<state>stable</state>
<notes>* fix bug when parsing responses with boolean types
</notes>
</release>
<release>
<version>1.0.2</version>
<date>2002-04-16</date>
<state>stable</state>
<notes>* E_ALL fixes
* fix HTTP response header parsing
</notes>
</release>
<release>
<version>1.0.1</version>
<date>2001-09-25</date>
<state>stable</state>
<notes>This is a PEAR-ified version of Useful Inc's 1.0.1 release.
Includes an urgent security fix identified by Dan Libby <dan@libby.com>.
</notes>
</release>
</changelog>
</package>
|
