PHP version recommended?

[Kevin205]

I am running PHP Version: 5.3.28.

What is the latest version of PHP recommended to be used with Zen Cart 1.5.1?

[mc12345678]

I am running PHP Version: 5.3.28.

What is the latest version of PHP recommended to be used with Zen Cart 1.5.1?

See: http://www.zen-cart.com/content.php?...o-run-zen-cart

Currently, 1.5.1 states: php 5.2.14 thru php 5.3.x. Requires some patches to work with php 5.4. There is a thread that also identifies that earlier versions of php may be prone to server hijacking that has been known about for 22+ months, but may not have been prevented by the applicable host. Don't know what area it's posted on, but I saw it yesterday. Was posted by Dr. Byte.

[Kevin205]

See: http://www.zen-cart.com/content.php?...o-run-zen-cart

Currently, 1.5.1 states: php 5.2.14 thru php 5.3.x. Requires some patches to work with php 5.4. There is a thread that also identifies that earlier versions of php may be prone to server hijacking that has been known about for 22+ months, but may not have been prevented by the applicable host. Don't know what area it's posted on, but I saw it yesterday. Was posted by Dr. Byte.

Thanks for the reply.

Dr. Byte's post brought me to this question. The post says PHP versions prior to 5.3.12 and 5.4.2 are vulnerable! The post did not mention what is safe. Also as I read the Risk Assessment Article, it was confusing to me, and did not make any sense.

Trying to figure out what to do.

[mc12345678]

Thanks for the reply. Dr. Byte's post brought me to this question. The post says PHP versions prior to 5.3.12 and 5.4.2 are vulnerable! The post did not mention what is safe. Also as I read the Risk Assessment Article, it was confusing to me, and did not make any sense.Trying to figure out what to do.

Well, the second "line" of the post offered to test at least for the one "flaw" that was described on that line. I may be wrong, but it seemed like the flaw of concern described in the first line was the flaw that is further described and possible to test for in the second line. At least that was how I read things. And I thought the article in the first line identified the version of php to which are potentially vulnerable. Therefore would think any version greater than that would not be subject to that flaw.

[Kevin205]

Well, the second "line" of the post offered to test at least for the one "flaw" that was described on that line. I may be wrong, but it seemed like the flaw of concern described in the first line was the flaw that is further described and possible to test for in the second line. At least that was how I read things. And I thought the article in the first line identified the version of php to which are potentially vulnerable. Therefore would think any version greater than that would not be subject to that flaw.

To me it was two separate issues. One a PHP CGI Bug and another was a SSL flaw. I am probably wrong?