If you're using anything that is remotely related to XML-RPC (PostNuke, Nucleus, phpAdsNew, phpPgAds, phpMyFAQ, Serendipity, Wordpress, Drupal, and Xoops, just to name a few), you need to pay attention. The official word from Secunia is that with this latest exploit "Input passed in an XML document is not properly sanitised before being used in an "eval()" call. This can be exploited to inject arbitrary PHP code via a specially crafted XML document." You should check with your vendors for upgrades (in case they have added anything else with the new package) and/or upgrade your own version of XML-RPC if you have it on your servers. To download this package or read about the changelog, you can go to http://pear.php.net/package/XML_RPC/, or simply use the "PEAR upgrade" command to upgrade an existing installation.
PHP 4.4.0RC2 released
Although the final release is planned for July 11 (according to http://www.php.net) you can download and begin testing the latest release right now. This release also includes the upgraded version of PEAR's XML-RPC. To download the latest, go to http://qa.php.net/~derick/.
Recent PHP Titles Released
There are several PHP books that have recently been released including:
PHP5 for Dummies, by C. Braun.
PHP & MySQL Every Day Apps for Dummies, by Janet Valade
PHP & MySQL for Dynamic Web Sites: Visual Quick Pro Guide (2nd Edition), by Larry Ullman
And soon to be released (so keep your eyes open):
No Nonsense XML Web Development with PHP, by Thomas Myer
Extending and Embedding PHP, by George Schlossnagle & Wez Furlong
PHP-Nuke: Mastering Internet Content Management, by Jens Ferner
PHP 5 Recipes: A Problem-Solution Approach, by Jon Stephans, et al
PHP Application Design Handbook, by Kevin Tatroe , Tobias Ratschiller
Of course, all of these titles (along with practically everything else in existence) can be purchased through Amazon.com.