PHP 5.3.3 & 5.2.14 released
 

Important point:


via http://php.net/

Re: PHP 5.3.3 & 5.2.14 released
 

Thanks for the heads up rrf.

For those of you whose servers are in scope for your PCI-DSS assessment this means you must upgrade. Its unclear whether or not this would be classed as a critical security patch so installing within the 1 month requirement for critical security patches would be prudent. If you are running PHP 5.2 then this means you need to upgrade to 5.3 pretty quickly. I think you could make a case for going to 5.2.14 within 1 month and then to 5.3.3 within the next month. But thats about it for 5.2 since there is no guarantee of future security patches.

Re: PHP 5.3.3 & 5.2.14 released
 

HackerGuardian (Comodo) is already sending out the notices to users saying that they'll be out of PCI Compliance in 7 days if they are not updated. I expect to see a rush of users needing that X-Cart PHP 5.3 patch :)

EDIT NOTE: I mistakenly said HackerSafe (which was bought by ScanAlert which was bought by McAfee). I've edited it to say HackerGuardian (Comodo)

Re: PHP 5.3.3 & 5.2.14 released
 

Yea, unfortunately that php 5.3 patch only works on the 'stable' (i.e. latest) version of each branch. For example, I tried the 4.1.12 patch on a 4.1.8 cart and it was a no go. Going to start a new thread for people to post solutions to this issue - need a central clearing house of patches for each version.

Re: PHP 5.3.3 & 5.2.14 released
 

Here's another fun problem - Plesk doesn't run on PHP 5.3 yet. Anyone heard anything about when that is going to be addressed? I'm a big Plesk fan and don't want to switch to Cpanel :(

Re: PHP 5.3.3 & 5.2.14 released
 

As far as I know the hosting platform that QualiTeam operates on for their own hosting company is operating under Plesk. Myself, I'm a cPanel guy, but I remember seeing a few people on WebHostingTalk talking about doing a custom php build in Parallels (Plesk), but it had to be on the newer version of their software.

Re: PHP 5.3.3 & 5.2.14 released
 

From what I have read you can run PHP 5.3 on Plesk for your applications (e.g. X-Cart) but not for the control panel. Sound like they are using an encoder that isn't compatible with PHP 5.3 for the CP. They are two different PHP installs so its possible to go to PHP 5.3 for X-Cart and leave Plesk running PHP 5.2.x. Now that defeats the PCI requirements and Parallels just suggests to hide the php version using expose_php=off in the php.ini to pass scans.

http://forum.parallels.com/showthread.php?t=92192

Re: PHP 5.3.3 & 5.2.14 released
 

Have you considered the atomicturtle repositories for doing this? So far I've had no probs with running php- 5.3.3

Re: PHP 5.3.3 & 5.2.14 released
 

I just received notice today that my hosting company (EWD) that will be switching to PHP 5.3 shortly. What problems can I expect, if any, while using x-cart 4.2.3 and 4.1.11?

Re: PHP 5.3.3 & 5.2.14 released
 

4.1 you'll need to patch. I believe the 4.2.x is already PHP 5.3 compatible.

You can get the patch from inside the File Area in the members area.

Re: PHP 5.3.3 & 5.2.14 released
 

Actually... 4.1.11 needs to be patched to 4.1.12 and THEN you can apply the PHP 5.3 patch.

You must run the latest version of the branch before you can apply the patch;

4.0.19 has the PHP 5.3 patch ability, but no prior version of 4.0.x
4.1.11 has the PHP 5.3 patch abaility, but no prior version of 4.1.x
All versions from 4.2, 4.3 and 4.4 are PHP 5.3 compatible.

Re: PHP 5.3.3 & 5.2.14 released
 

I am running Litecommerce 2.2.41
Does anyone know if am I likely to run into problems with PHP 5.3 with this (I am also with EWDHosting)
Thanks
Trevor

Re: PHP 5.3.3 & 5.2.14 released
 

That's one for Qualiteam. Hopefully they can address this for you. I don't know of any customers running LiteCommerce on PHP 5.3. I think the latest version any of our LiteCommerce users are using is the 5.2, but hopefully Qualiteam can address this.

Re: PHP 5.3.3 & 5.2.14 released
 

Trevor, yes that would be one to ask qualiteam. I have not seen any annoucements from them on the issue.

Just so everyone knows we are not going to upgrade overnight. We are just making everyone aware of what's to come in the future so no one gets caught with short pants on when PHP 5.2 is not longer supported.
There is plenty of time for everyone to get up to speed but the changes have to be made.

Re: PHP 5.3.3 & 5.2.14 released
 

Awww Emerson - ruin the fun :) I was going to pull the plug on a Friday at 5pm so that everyone's websites are down for the weekend ;) (you know us web hosting companies just love creating our own problems)

Yeah the upgrade of servers to the newever versions likely wouldn't even be completed within 1 month time. I'm not sure how EWD is doing their update process, but ours has been moving users to newer Cloud Servers so not only does the user get the PHP 5.3 but they also get newer equipment and cloud redundant hardware etc. At any time a user can request to be moved to a PHP 5.3 machine and either hosting company will make the move!

PHP 5.2 will be phased out over time, but if it's anything like the PHP 4 to PHP 5 move the process may take up to 1 year for some hosting companies to complete. Still, there's no harm in users upgrading their software and being ready for the change THIS MONTH rather than being forced into an upgrade situation potentially costing hundreds or thousands of dollars in upgrade fees.

Re: PHP 5.3.3 & 5.2.14 released
 

Well I thought about doing it all tonight but for 2 reasons I decided not to.
1) WHMCS might blow up with the amount of tickets we would get
2) this old man can not handle it

lol

Re: PHP 5.3.3 & 5.2.14 released
 

I thought the patch for 4.1.12 could be applied to earlier 4.1.x versions - see: this

It seems there was a little more to it - but I can't find the threads that describ any additional changes.

---

Re: PHP 5.3.3 & 5.2.14 released
 

Folks, I am looking at all of my installations and not finding patches for php5.3 for X-cart versions 4.1.11 and below. Any thoughts on why? The patch is there for 4.1.12

Pat

Re: PHP 5.3.3 & 5.2.14 released
 

Still confused. What does this mean for versions 4.1.10 and prior?

Re: PHP 5.3.3 & 5.2.14 released
 

Thanks for that info gb2wolrd. Maybe Qualiteam would be cos kind as to copy the patch file to the other distributives that they know it works. It certainly would prevent situations like what mcpilot has right now.

I had been telling my users that the patch was only available on the latest branch, but if the same one can be used on prevent branch versions, that's certainly valuable information to have.

Does anyone have a list of previous version numbers that the patch is still valid and would work on?

Re: PHP 5.3.3 & 5.2.14 released
 

Litecommerce 2.2.41 is already compatible with PHP 5.3.

Re: PHP 5.3.3 & 5.2.14 released
 

X-Cart versions 4.2.3, 4.3.x, 4.4.x are already compatible with
PHP 5.3. PHP 5.3 compatibility patches for earlier X-Cart versions can be found here:

http://forum.x-cart.com/showthread.php?p=285270#post285270

Re: PHP 5.3.3 & 5.2.14 released
 

If a 4.1.x shop is running on php 5.2 already, does that need the 5.3 patch, or is that just for shops that were running on php 4.x?

Re: PHP 5.3.3 & 5.2.14 released
 

You will need the 5.3 patch in case you decide to upgrade php from 5.2 to 5.3.

Re: PHP 5.3.3 & 5.2.14 released
 

I believe that is correct.

Re: PHP 5.3.3 & 5.2.14 released
 

See this post: http://forum.x-cart.com/showthread.php?p=285270#post285270

Re: PHP 5.3.3 & 5.2.14 released
 

I have been pleading for emerson to give me an ETA on the php upgrade. I just need to know an estimate! I'm working with xcart to upgrade, but we are our in busy season and overwhelmed hardly covers it. Come on, do I have a couple weeks, end of the month???

Re: PHP 5.3.3 & 5.2.14 released
 

Hi Dawn,

It's probably best to ask Emerson himself through their ticket system as to how they're proceeding with the upgrades.

For our clients, we will be continuing to operate both PHP 5.3 and PHP 5.2 machines for quite some time. Users that want to migrate to the PHP 5.3 machines are free to do so, and our staff will move the sites for them.

I don't anticipate that the PHP 5.2 servers in our network (Hands-on Web Hosting) will be removed for many months to come. Running on PHP 5.2 can negatively affect the PCI Compliance required by various Merchant Providers, but I'd venture to say that it would be at a minimum 6 months before our PHP 5.2 machines are removed from service - maybe even longer.

Re: PHP 5.3.3 & 5.2.14 released
 

Thank you Conor!

I did contact him through his ticket system before posting here, but I was finally able to hold him down and give me a stright answer :) Hell hath no fury like a webmaster lost in code.