PHP: Hypertext Preprocessor

PHP: Hypertext PreprocessorPHP
downloads | documentation | faq | getting help | mailing lists | licenses | wiki | reporting bugs | php.net sites | links | conferences | my php.net

search for in the
What is PHP?

PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. If you are new to PHP and want to get some idea of how it works, try the introductory tutorial. After that, check out the online manual, and the example archive sites and some of the other resources available in the links section.

Ever wondered how popular PHP is? see the Netcraft Survey.
Thanks To

easyDNS
Directi
pair Networks
Server Central
Hosted Solutions
Spry VPS Hosting
eZ Systems / HiT
OSU Open Source Lab
Yahoo! Inc.
BinarySEC
NEXCESS.NET
Rackspace
EUKhost
SoHosted Webhosting

Related sites

Apache
MySQL
PostgreSQL
Zend Technologies

Community

LinuxFund.org
OSTG

Syndication

You can grab our news as an Atom feed.
Stable Releases

Current PHP 5.3 Stable: 5.3.6

Upcoming Events [add]
May
Conferences
12. phpDay 2011
29. International PHP Conference
User Group Events
01. PHP meeting online in China
01. meeting de LAMPistas en La Paz
02. PHP Online User Group
03. SW Florida Linux Users Group
03. PDXPHP monthly meeting
03. Jacksonville User Group
03. Berlin PHP Usergroup Meeting
03. PHPNW: PHP North West user group
04. Meeting PHP Usergroup OWL
04. BostonPHP
04. Pittsburgh PHP Meetup Group
05. SDPHP (San Diego, CA)
05. Hannover
05. Meetup Day
05. Omaha PHP Users Group Meetup
05. PHP London
05. The Houston PHP Users Group
05. Boston PHP Meetup
05. Atlanta PHP User Group
05. Sydney PHP Group meetings
05. PHP UG Meetup Auckland
05. Seattle PHP Meetup Group
05. The Copenhagen PHP Meetup Group
05. SF PHP Meetup
05. Knoxville Python & PHP UG
05. Minnesota PHP User Group
05. OrlandoPHP User Group
05. PHP Cardiff Meetup
05. PHPEM
06. Köln/Bonn
06. Iran PHP developer's meetup
08. Los Angeles PHP Developers Group
09. Queen City (Charlotte) PHP
10. Hamburg
10. Dallas PHP/MySQL Users Group
10. Dallas PHP Users Group (DPUG)
10. Austin PHP Meetup
10. OKC PHP Meetup
10. Nashville PHP User Group
10. Oklahoma City PHP User Group
10. Buffalo PHP Meetup
10. South Florida PHP Users Group
10. South Florida PUG - Lauderdale
10. PHPBenelux Meeting May 2011 (NL)
11. Wash DC PHP Developers Group
11. PHP User Group Stuttgart
11. South FL PUG- Miami
11. PHP South West User Group
12. Meeting usergroup Dortmund
12. PHP Usergroup Frankfurt/Main
12. Edinburgh PHP Users Group
12. Metro Jersey PHP Usergroup
14. PHP User Group Nanaimo, BC/CA
14. PEA meeting from phpchina
14. Nagpur PHP Meetup
14. Nezahualcoyotl PHP Ramptors
17. PHP Brisbane Meetup Group
17. Nashville Enterprise LAMP UG
17. Chattanooga PHP Developers
17. PHP North-East User Group
18. Miami PHP User Group
18. Broward Php Usergroup
18. Chicago PHP User Group Brunch
18. Baltimore PHP User Group
19. TriPUG
19. OINK-PUG (Cincinnati, Ohio)
19. Utah PHP Users Group Meeting
19. Denver - FRPUG
21. Kansas City
21. Miami Linux Users Group
21. Twin Cities PHP
21. Los Angeles LAMPsig
23. Tampa Bay Florida PHP
24. New York
24. AzPHP
24. DCPHP Beverage Subgroup
24. Brisbane PHP User Group
25. Irish PHP Users Group meeting
26. Arabic PHP Group Meeting
26. Malaysia PHP User Group Meet Up
26. Sandy PHP Group
26. Memphis PHP
28. Sacramento PHP Group
28. Miami Linux Meetup
28. PHP RIO Meetup
28. PHP User Group Hong Kong
30. Long Island PHP Users Group
30. Winnipeg PHP
31. Malaysia PHP Meetup
31. PHP Usergroup Karlsruhe
31. PHPUG Wuerzburg
31. PHP User Group Roma
Training
01. Ahmedabad PHP Group Training
01. php training
01. Curso PHP Guatemala
02. MySQL Spain
02. Curso PHP Madrid
02. PHP E-Learning/Germany
02. Curso on-line ActionScript / PHP
02. PHP & MySQL Training in Kassel
02. PHP & MySQL com Dreamweaver MX
02. Curso on-line de PHP
02. PHP & MYSQL-Construindo WebSites
02. PHP Training Heilbronn
02. ZEND: PHP I Foundations on-line
02. ZEND: PHP II Higher Structures
02. ZEND: Test Prep: PHP 5.3 Cert
02. ZEND:Framework Fundamentals
02. ZEND: Zend Server
02. Einführung - PHP und Datenbanke
03. Curso on-line de PHP-MySQL
03. PHP Class at CalTek
03. PHP Fortgeschrittene Seminar
03. Разработка web - са�
04. PHP Training - Chennai - India
04. Zend Certification
05. Curso de PHP Avanzado en Bilbao
07. PHP & AJAX -Construindo Websites
07. Core and Advanced PHP Workshop
09. PHP para Expertos Curso on-line
09. Curso PHP y MySQL
09. ZEND: Quick Start for PHP
09. ZEND:Framework Advanced
10. ZEND: Building in PHP Security
11. UK Object Orientation Workshop
12. UK Smarty Templating Workshop
12. Безопасность веб
16. PHP & MySQL Training / Gießen
16. PHP/MySQL Bootcamp
17. Cursos de PHP en Bilbao
19. Chennai PHP Training
21. MySQL5.Проектирован�
23. PHP Intro Course South Africa
23. Разработка на PHP 5
23. PHP I: Foundations, Dortmund
24. UK PHP Training
26. PHP Brasil - Training
27. PHP Training
30. Basic PHP Course
30. Основы создания с
30. PHP и MySQL
31. Разр-ка сложных п�
31. ZEND:Test Prep: Framework Cert
Upcoming conferences:

Dutch PHP Conference 2011
Italian phpDay 2011


php.net security notice
[19-Mar-2011]

The wiki.php.net box was compromised and the attackers were able to collect wiki account credentials. No other machines in the php.net infrastructure appear to have been affected. Our biggest concern is, of course, the integrity of our source code. We did an extensive code audit and looked at every commit since 5.3.5 to make sure that no stolen accounts were used to inject anything malicious. Nothing was found. The compromised machine has been wiped and we are forcing a password change for all svn accounts.

We are still investigating the details of the attack which combined a vulnerability in the Wiki software with a Linux root exploit.
PHP 5.3.6 Released!
[17-Mar-2011]

The PHP development team would like to announce the immediate availability of PHP 5.3.6. This release focuses on improving the stability of the PHP 5.3.x branch with over 60 bug fixes, some of which are security related.

Security Enhancements and Fixes in PHP 5.3.6:

Enforce security in the fastcgi protocol parsing with fpm SAPI.
Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
Fixed bug #54193 (Integer overflow in shmop_read()). (CVE-2011-1092)
Fixed bug #54055 (buffer overrun with high values for precision ini setting).
Fixed bug #54002 (crash on crafted tag in exif). (CVE-2011-0708)
Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421)

Key enhancements in PHP 5.3.6 include:

Upgraded bundled Sqlite3 to version 3.7.4.
Upgraded bundled PCRE to version 8.11.
Added ability to connect to HTTPS sites through proxy with basic authentication using stream_context/http/header/Proxy-Authorization.
Added options to debug backtrace functions.
Changed default value of ini directive serialize_precision from 100 to 17.
Fixed Bug #53971 (isset() and empty() produce apparently spurious runtime error).
Fixed Bug #53958 (Closures can't 'use' shared variables by value and by reference).
Fixed bug #53577 (Regression introduced in 5.3.4 in open_basedir with a trailing forward slash).
Over 60 other bug fixes.

Windows users: please mind that we do no longer provide builds created with Visual Studio C++ 6. It is impossible to maintain a high quality and safe build of PHP for Windows using this unmaintained compiler.

For Apache SAPIs (php5_apache2_2.dll), be sure that you use a Visual Studio C++ 9 version of Apache. We recommend the Apache builds as provided by ApacheLounge. For any other SAPI (CLI, FastCGI via mod_fcgi, FastCGI with IIS or other FastCGI capable server), everything works as before. Third party extension providers must rebuild their extensions to make them compatible and loadable with the Visual Studio C++9 builds that we now provide.

All PHP users should note that the PHP 5.2 series is NOT supported anymore. All users are strongly encouraged to upgrade to PHP 5.3.6.

For a full list of changes in PHP 5.3.6, see the ChangeLog. For source downloads please visit our downloads page, Windows binaries can be found on windows.php.net/download/.
PHP 5.3.5 and 5.2.17 Released!
[06-Jan-2011]

The PHP development team would like to announce the immediate availability of PHP 5.3.5 and 5.2.17.

This release resolves a critical issue, reported as PHP bug #53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers.

The problem is known to only affect x86 32-bit PHP processes, regardless of whether the system hosting PHP is 32-bit or 64-bit. You can test whether your system is affected by running this script from the command line.

All users of PHP are strongly advised to update to these versions immediately.
PHP 5.2.16 Released!
[16-Dec-2010]

The PHP development team would like to announce the immediate availability of PHP 5.2.16. This release marks the end of support for PHP 5.2. All users of PHP 5.2 are encouraged to upgrade to PHP 5.3.

This release focuses on addressing a regression in open_basedir implementation introduced in 5.2.15 in addition to fixing a crash inside PDO::pgsql on data retrieval when the server is down. All users who have upgraded to 5.2.15 and are utilizing open_basedir are strongly encouraged to upgrade to 5.2.16 or 5.3.4.

To prepare for upgrading to PHP 5.3, now that PHP 5.2's support ended, a migration guide available on http://php.net/migration53, details the changes between PHP 5.2 and PHP 5.3.

For a full list of changes in PHP 5.2.16 see the ChangeLog at http://www.php.net/ChangeLog-5.php#5.2.16.
PHP 5.3.4 Released!
[10-Dec-2010]

The PHP development team is proud to announce the immediate release of PHP 5.3.4. This is a maintenance release in the 5.3 series, which includes a large number of bug fixes.

Security Enhancements and Fixes in PHP 5.3.4:

Fixed crash in zip extract method (possible CWE-170).
Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
Fixed a possible double free in imap extension (Identified by Mateusz Kocielski). (CVE-2010-4150).
Fixed NULL pointer dereference in ZipArchive::getArchiveComment. (CVE-2010-3709).
Fixed possible flaw in open_basedir (CVE-2010-3436).
Fixed MOPS-2010-24, fix string validation. (CVE-2010-2950).
Fixed symbolic resolution support when the target is a DFS share.
Fixed bug #52929 (Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data) (CVE-2010-3710).

Key Bug Fixes in PHP 5.3.4 include:

Added stat support for zip stream.
Added follow_location (enabled by default) option for the http stream support.
Added a 3rd parameter to get_html_translation_table. It now takes a charset hint, like htmlentities et al.
Implemented FR #52348, added new constant ZEND_MULTIBYTE to detect zend multibyte at runtime.
Multiple improvements to the FPM SAPI.
Over 100 other bug fixes.

For users upgrading from PHP 5.2 there is a migration guide available here, detailing the changes between those releases and PHP 5.3.