基于PHP与SQL的考勤系统安全性设计与代码实现

PHP 4 NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 15 Apr 2004, Version 4.3.6 - Updated bundled PDFLib library to version 5.0.3p1 in Windows distribution. (Edin) - Fixed a crash in multi-threaded environments when a thread is shutdown by the web server. (Stas) - Fixed a bug that prevented building of the GD extension against external GD lib 1.X. (Ilia, Edin, Nick Talbott). - Synchronized bundled GD library with GD 2.0.22. (Ilia) - Fixed bug #27963 (Session lifetime setting may leak between requests). (Ilia) - Fixed bug #27849 (configure craps out on trivial syntax error). (Derick) - Fixed bug #27822 (is_resource() returns TRUE for closed resources). (Derick) - Fixed bug #27819 (problems returning reference to a reference parameter). (Ilia) - Fixed bug #27809 (ftp_systype returns null on some ftp servers). (Ilia) - Fixed bug #27802 (default number of children to 8 when PHP_FCGI_CHILDREN is not defined). (Ilia) - Fixed bug #27780 (strtotime(+1 xxx) returns a wrong date/time). (Derick) - Fixed bug #27769 (domxml_xmltree crashes). (Rob) - Fixed bug #27764 (Get return value from a stored procedure not returning any result sets). (Frank) - Fixed bug #27762 (SCO Openserver doesn't have S_ISSOCK). (Wez) - Fixed bug #27743 (Make sure Money types are converted and returned correctly). (Frank) - Fixed bug #27732 (Fixed compilation bug inside php_sab_info.h). (Ilia) - Fixed bug #27731 (error_reporting() inside @ block fails to set error_reporting level). (Ilia) - Fixed bug #27719 (mktime issues on and around DST changeover). (Rasmus) - Fixed bug #27717 (Test Failures when compiled on 64-bit mode). (Ard, Derick) - Fixed bug #27687 (Bug Adding Default Charset to 'text/*' Content-Type Header). (Marcus) - Fixed bug #27663 (compile failure with cURL 7.11.1). (Ilia) - Fixed bug #27646 (Cannot serialize/unserialize non-finite numeric values). (Marcus) - Fixed bug #26757 (session.save_path default is bogus for win32). (Wez) - Fixed bug #26589 (Crash inside mssql extension when selecting many columns of type money). (Frank) - Fixed bug #25547 (error_handler and array index with function call). (cschneid at cschneid dot com) 26 Mar 2004, Version 4.3.5 - Fixed possible crash using an invalid color index with a palette image in imagecolortransparent. (Pierre) - Fixed php-cgi to not ignore command-line switches when run in a web context. This fixes our test cases allowing INI with GET sections to work. (Rasmus) - Fixed getopt() so it works without $_SERVER. (Rasmus, bfrance) - Fixed crash in php_ini_scanned_files() when no additional INI files were actually parsed. (Jon) - Fixed possible crashes inside socket extension, due to missing check inside allocation functions. (Ilia) - Fixed zero bytes memory allocation when no extra ini files are found in the --with-config-file-scan-dir specified directory. (Eric Colinet, Derick) - Changed "allow_url_fopen" php.ini option to be PHP_INI_SYSTEM. (Sara) - Improved the sybase_ct module: (Timm) . Added ability to define a message handler not only globally, but also per connection. . Added "sybct.packet_size" php.ini option. . Changed "sybct.login_timeout" php.ini option changeable at runtime. . Fixed memory leak in sybase_set_message_handler(). - Synchronized bundled GD library with GD 2.0.17. (Ilia) - Upgraded PCRE library to version 4.5. (Andrei) - Updated bundled PostgreSQL library to version 7.4 in Windows distribution. (Edin) - Added support for --program-prefix and --program-suffix configure options. (Jani) - Added a warning when creating temp stream fails with ftp_(n)list(). (Sara) - Fixed header handler in NSAPI SAPI module (header->replace was ignored, send_default_content_type now sends value from php.ini). (Uwe Schindler) - Fixed bug #27633 (Incorrect EOL translation by ftp_get() in ASCII mode). (Ilia) - Fixed bug #27600 (GCC 3.0.4 does not like __attribute__ directive). (Sascha) - Fixed bug #27590 (crash during shutdown when freeing persistent resources in ZTS mode). (Ilia) - Fixed bug #27582 (possible crashes in imagefilltoborder()). (Pierre) - Fixed bug #27580 (pre-initialization errors in ap2 handler are not being written to vhost error log). (Ilia) - Fixed bug #27559 (Corrected open_basedir resolving logic). (Ilia) - Fixed bug #27530 (broken http auth when safe_mode is on and PCRE is disabled). (Ilia) - Fixed bug #27509 (broken getaddrinfo() causes fsockopen() error). (Sara) - Fixed bug #27505 (htmlentities() does not handle BIG5 correctly). (Ilia, ywliu at hotmail dot com) - Fixed bug #27498 (bogus safe_mode error on nonexistent directories for chdir() and opendir() functions). (Ilia) - Fixed bug #27460 (base64_decode() does not handle extra padding). (Ilia, naish at klanen dot net) - Fixed bug #27443 (defined() returns wrong type). (Derick) - Fixed bug #27437 (wrong freetype include inside GD library). (Ilia) - Fixed bug #27424 (headers missing on flush() in apache 2 SAPIs). (Ilia) - Fixed bug #27421 (mbstring.func_overload should be system ini setting). (Ilia) - Fixed bug #27384 (unpack() misbehaves with 1 char string). (GeorgeS) - Fixed bug #27383 (Potential crash inside fopen_wrapper, while parsing response code). (Ilia) - Fixed bug #27354 (Modulus operator crashes PHP). (Derick) - Fixed bug #27341 (HEAD requests fail to return data). (Ilia) - Fixed bug #27337 (missing sapi_shutdown() in sapi/isapi causes memory leak). (Jani, msisolak at yahoo dot com) - Fixed bug #27328 (ftp extension relies on 32-bit longs). (Sara) - Fixed bug #27300 (Improved regex for pg_convert()). (benjcarson at digitaljunkies dot ca, Ilia) - Fixed bug #27295 (memory leak inside sscanf()). (Ilia) - Fixed bug #27293 (two crashes inside image2wbmp()). (Ilia) - Fixed bug #27291 (get_browser matches browscap.ini patterns incorrectly). (Jay) - Fixed bug #27278 (*printf() functions treat arguments as if passed by reference). (Ilia) - Fixed bug #27238 (iptcparse() function misses some fields). (Pierre) - Fixed bug #27235 (Interbase NUMERIC x.0 field returns empty string on 0). (Ard) - Fixed bug #27196 (Missing content_length initialization in apache 2 sapis). (Ilia, pdoru at kappa dot ro) - Fixed bug #27183 (userland stream wrapper segfaults on stream_write). (Moriyoshi) - Fixed bug #27175 (tzset() is not being called by PHP on startup). (Ilia, sagawa at sohgoh dot net) - Fixed bug #27172 (Possible floating point exception in gmp_powm()). (Ilia) - Fixed bug #27171 (crash inside gmp_hamdist()). (Jani) - Fixed bug #27157 (Compile Failure on Solaris 8). (Timm) - Fixed bug #27149 (broken CLOB support in oci8 extension). (Antony) - Fixed bug #27135 (Possible crash inside mb_strlen()). (Moriyoshi) - Fixed bug #27104 (CLI/CGI SAPI module variable name conflict). (Marcus) - Fixed bug #27058 (crash in sybase_connect() with 2 arguments). (Ilia) - Fixed bug #27056 (ints used instead of longs inside some GD functions). (Ilia) - Fixed bug #27040 (passing an array of form-fields to CURLOPT_POSTFIELDS does not work). (Ilia, Jani) - Fixed bug #27037 (fixed possible crash in apache2handler output code). (Ilia) - Fixed bug #27026 (Added "cgi.nph" php.ini option to allow forcing of the 'Status: 200' header that is not normally needed). (Ilia) - Fixed bug #27011 (64bit int/long confusion in preg_match*() functions). (Ilia) - Fixed bug #27007 (missing connection closure when connect fails in pgsql). (Ilia) - Fixed bug #26974 (rename() doesn't check the destination file against safe_mode/open_basedir). (Ilia) - Fixed bug #26973 (*printf() '+' modifier broken). (Jani) - Fixed bug #26969 (--with-openssl=shared build fails). (Jani) - Fixed bug #26968 (Segfault with Interbase module built as shared). (Ard) - Fixed bug #26949