Yasuo Ohgaki yohgaki
yohgaki
/ security.xml.patch
Created
February 20, 2014 00:52
Patch for en/reference/session/security.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Index: en/reference/session/security.xml | |
| =================================================================== | |
| --- en/reference/session/security.xml (リビジョン 332867) | |
| +++ en/reference/session/security.xml (作業コピー) | |
| @@ -7,6 +7,102 @@ | |
| External links: <link xlink:href="&url.session-fixation;">Session fixation</link> | |
| </para> | |
| <para> | |
| + HTTP session management is core of web security. All of mitigation should be adopted to make | |
| + sure session security. User should enable/use applicable settings appropriately. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/ext/pgsql/pgsql.c b/ext/pgsql/pgsql.c | |
| index 2ac0454..c4632ae 100644 | |
| --- a/ext/pgsql/pgsql.c | |
| +++ b/ext/pgsql/pgsql.c | |
| @@ -746,6 +746,104 @@ ZEND_GET_MODULE(pgsql) | |
| static int le_link, le_plink, le_result, le_lofp, le_string; | |
| +/* Compatibility definitions */ | |
| + |
yohgaki
/ PHP-5.6-rfc-default-encoding.patch
Created
January 20, 2014 02:34
Implementation of this RFC.
https://wiki.php.net/rfc/default_encoding
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/ext/iconv/iconv.c b/ext/iconv/iconv.c | |
| index ea6ac1a..c8784b1 100644 | |
| --- a/ext/iconv/iconv.c | |
| +++ b/ext/iconv/iconv.c | |
| @@ -220,21 +220,55 @@ static char _generic_superset_name[] = ICONV_UCS4_ENCODING; | |
| #define GENERIC_SUPERSET_NBYTES 4 | |
| /* }}} */ | |
| -static PHP_INI_MH(OnUpdateStringIconvCharset) | |
| + |
yohgaki
/ php-5.3-addslshes-mblen
Last active
January 1, 2016 14:09
Add mblen support to addslashes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/ext/standard/string.c b/ext/standard/string.c | |
| index 907301d..3d5b7a2 100644 | |
| --- a/ext/standard/string.c | |
| +++ b/ext/standard/string.c | |
| @@ -3248,7 +3248,7 @@ PHPAPI char *php_addslashes_ex(char *str, int length, int *new_length, int shoul | |
| char *source, *target; | |
| char *end; | |
| int local_new_length; | |
| - | |
| + |
yohgaki
/ gist:7441034
Created
November 13, 2013 00:00
Patch adds rpm build script to casperjs-master.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/rpm/build b/rpm/build | |
| new file mode 100755 | |
| index 0000000..de73e32 | |
| --- /dev/null | |
| +++ b/rpm/build | |
| @@ -0,0 +1,26 @@ | |
| +#!/bin/sh | |
| +# | |
| +# A silly little helper script to build the RPM. | |
| +set -e |
yohgaki
/ PHP-master-session-write-short-circuit.diff
Last active
December 20, 2015 21:38
This simple patch implements session write short circuit. It removes unneeded session data writes by comparing session data hash digest.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/ext/session/php_session.h b/ext/session/php_session.h | |
| index e8e79f0..ba3420e 100644 | |
| --- a/ext/session/php_session.h | |
| +++ b/ext/session/php_session.h | |
| @@ -180,6 +180,7 @@ typedef struct _php_ps_globals { | |
| double rfc1867_min_freq; /* session.upload_progress.min_freq */ | |
| zend_bool use_strict_mode; /* whether or not PHP accepts unknown session ids */ | |
| + char session_data_hash[16]; /* binary MD5 hash length */ | |
| } php_ps_globals; |
yohgaki
/ session_php_serializer.patch
Created
August 7, 2013 06:07
"php_serialize" session serialize handler for PHP Session module.
This patch adds new session.serializer_handler that serializes session data by plain serialize(). This serializer removes limitations due to the heritage of "register_globals". Users may use numeric key for $_SESSION with this new serializer. e.g. $_SESSION[1] = 'foo'
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/ext/session/session.c b/ext/session/session.c | |
| index c02a10d..1497da4 100644 | |
| --- a/ext/session/session.c | |
| +++ b/ext/session/session.c | |
| @@ -827,6 +827,51 @@ PHP_INI_END() | |
| /* *************** | |
| * Serializers * | |
| *************** */ | |
| +PS_SERIALIZER_ENCODE_FUNC(php_serialize) /* {{{ */ | |
| +{ |
yohgaki
/ gist:2717255
Created
May 17, 2012 07:51
memcache 2.2.6 patch for my strict PHP session patch
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff -up memcache-2.2.6/memcache_session.c.orig memcache-2.2.6/memcache_session.c | |
| --- memcache-2.2.6/memcache_session.c.orig 2012-05-17 14:50:33.000000000 +0900 | |
| +++ memcache-2.2.6/memcache_session.c 2012-05-17 16:28:20.000000000 +0900 | |
| @@ -280,6 +280,42 @@ PS_GC_FUNC(memcache) | |
| } | |
| /* }}} */ | |
| + | |
| +PS_VALIDATE_SID_FUNC(memcache) | |
| +{ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?php | |
| // 出力バッファを開始 | |
| ob_start(); | |
| // PHPエラーを例外へ変換する為のクラス | |
| class myException extends Exception { | |
| public function __construct($errno, $errstr, $errfile, $errline, $errctx) { | |
| // エラー番号とエラーレベルのマッピング | |
| $errlev = array( | |
| E_USER_ERROR => 'SECURITY', |
yohgaki
/ gist:2270853
Created
April 1, 2012 02:52
Apache 1.3.42 build fix patch. Recent libc has getline
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff -ur httpd-1.3.42.orig//src/support/htdigest.c httpd-1.3.42/src/support/htdigest.c | |
| --- httpd-1.3.42.orig//src/support/htdigest.c 2006-07-12 17:16:05.000000000 +0900 | |
| +++ httpd-1.3.42/src/support/htdigest.c 2012-04-01 11:48:49.705771078 +0900 | |
| @@ -71,7 +71,7 @@ | |
| while ((line[y++] = line[x++])); | |
| } | |
| -static int getline(char *s, int n, FILE *f) | |
| +static int my_getline(char *s, int n, FILE *f) | |
| { |