News

Subscribe via RSS

Month of PHP Bugs started

01. March 2007 - the long awaited initiative to improve PHP's security has started more...

Suhosin 0.9.6 released

02. October 2006 - first stable release of the Advanced PHP protection system more...

Hardening-Patch v0.4.14 released

11. August 2006 - important fixes for patch against 5.1.x more...

Critical PHP Vulnerability Explained

6. August 2006 - more about the unset() vulnerability more...

Hardening-Patch v0.4.12 updated

4. August 2006 - now supporting PHP 4.4.3 more...

PHP 4.4.3 Security Fixes released

4. August 2006 - cause PHP.net is overstrained more...

More Security Fixes for PHP 4.4.2 and 5.1.4

19. July 2006 - because there is still no php.net reaction more...

Hardening-Patch v0.4.12 released

19. July 2006 - NEW: mail() header protection more...

PHP 5.1.4 Security Fixes released

13. May 2006 - closing the first known holes more...

PHP 4.4.2 Security Fixes released

8. May 2006 - cause PHP.net doesn't care anymore more...

WebHoster Survey

7. Februar 2005 - web hosting companies with Hardening-Patch more...

Hardening-Patch v0.4.7 released

28. November 2005 - another ext/curl security hole plugged more...

Hardening-Patch v0.4.6 released

26. November 2005 - NEW: session security features more...

Hardening-Patch v0.4.3 released

13. September 2005 - allowing a better configuration of allowed includes more...

PHP Security Talk (german) added

9. September 2005 - Part 1 of a series of PHP Security talks for beginners. more...

Hardening-Patch v0.4.2 released

7. September 2005 - Bringing sha256() and CRYPT_BLOWFISH to all PHP installations. more...

Hardening-Patch v0.4.1 re-released

10. August 2005 - Fix for the broken 4.4.0 package. more...

Hardening-Patch v0.4.0 released

4. August 2005 - Now with eval() function white- and blacklist. more...

Compatibility with eAccelerator 0.9.3

1. August 2005 - There is a small problem in eAccelerator that could cause trouble... more...

Serious Remote Security Hole in PHP 5.1 (beta) fixed

15. July 2005 - A proactive security audit of the Hardened-PHP Project has revealed... more...

hardened-php.net attacked by PHP security consortium

12. July 2005 - Several security tests on our website as a response to our recent article. more...

Hardening-Patch for PHP 4.4.0 released

11. July 2005 - and now we offer digitally signed PHP tarballs. more...

PHP Security Guide considered harmful article added.

11. July 2005 - When best practices contain security vulnerabilities. more...

PHP and Session Fixation article added

10. July 2005 - Permissive Session Management Systems not as bad as widely believed. more...

Hardening-Patch v0.3.2 released

9. July 2005 - The Hardening-Patch v0.3.2 has been released. more...

New Webpage, new "security consortium"

8. July 2005 - We are proud to introduce you to our new webpage. more...

Hardening-Patch v0.3.1 released

6. July 2005 - The Hardening-Patch v0.3.1 has been released. more...