Wednesday, September 7. 2005
The Hardened-PHP Project has just announced the release of version 0.4.2 of their Hardening-Patch for PHP.
The release features
- support for PHP 5.0.5
- upgrade to PEAR::XML_RPC 1.4.0
- the new functions sha256() and sha256_file() which work like PHP's sha1() and sha1_file() functions but implement the more secure SHA256 standard
- CRYPT_BLOWFISH support for more secure password hashing with crypt() on all platforms (Thanks to Solar Designer of the Openwall Project for the excellent idea and his free implementation)
- some minor fixes for compilation problems
- additional debugging messages for admins
If the PHP community likes the new sha256() support and the platform independent CRYPT_BLOWFISH support it will both merged into vanilla PHP.