This week we saw:

XML-RPC PEAR Package Security Alert

If you're using anything that is remotely related to XML-RPC (PostNuke, Nucleus, phpAdsNew, phpPgAds, phpMyFAQ, Serendipity, Wordpress, Drupal, and Xoops, just to name a few), you need to pay attention. The official word from Secunia is that with this latest exploit "Input passed in an XML document is not properly sanitised before being used in an "eval()" call. This can be exploited to inject arbitrary PHP code via a specially crafted XML document." You should check with your vendors for upgrades (in case they have added anything else with the new package) and/or upgrade your own version of XML-RPC if you have it on your servers. To download this package or read about the changelog, you can go to, or simply use the "PEAR upgrade" command to upgrade an existing installation.

PHP 4.4.0RC2 released

Although the final release is planned for July 11 (according to you can download and begin testing the latest release right now. This release also includes the upgraded version of PEAR's XML-RPC. To download the latest, go to

Recent PHP Titles Released

There are several PHP books that have recently been released including:

And soon to be released (so keep your eyes open):

Of course, all of these titles (along with practically everything else in existence) can be purchased through

phpMyAdmin Version 2.6.3 is Official

The recent release of phpMyAdmin is stable now, so feel free to upgrade to your heart's content. To get the package, go to And for a complete list of all the changes (there are numerous), go to

Translators Needed at phpMyAdmin

The good folks at the phpMyAdmin project are also seeking translators to assist them in translating phpMyAdmin strings. For full info, see number 7.2 of the FAQ found at To see what languages are desperately in demand, go to

PEAR/PECL releases

I would be remiss in my duties if I didn't include what's new at PEAR and PECL. Recent PEAR releases include:

And for PECL, we had:

PECL was relatively inactive this week as there are no new releases to report.

As always, you can download or learn more about these packages at and

See you next week with more news and tidbits from the PHP world!