NEWS 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333
  1. XML-RPC for PHP version 3.0.0 beta - 2009/09/05
  2. This is the first release of the library to only support PHP 5.
  3. Some legacy code has been removed, and support for features such as exceptions
  4. and dateTime objects introduced.
  5. The "beta" tag is meant to indicate the fact that the refactoring has been more widespread
  6. than in precedent releases and that more changes are likely to be introduced with time -
  7. the library is still considered to be production quality.
  8. * improved: removed all usage of php functions deprecated in php 5.3, usage of assign-by-ref when creating new objects etc...
  9. * improved: add support for the <ex:nil/> tag used by the apache library, both in input and output
  10. * improved: add support for dateTime objects in both in php_xmlrpc_encode and as parameter for constructor of xmlrpcval
  11. * improved: add support for timestamps as parameter for constructor of xmlrpcval
  12. * improved: add option 'dates_as_objects' to php_xmlrpc_decode to return dateTime objects for xmlrpc datetimes
  13. * improved: add new method SetCurlOptions to xmrlpc_client to allow extra flexibility in tweaking http config, such as explicitly binding to an ip address
  14. * improved: add new method SetUserAgent to xmrlpc_client to to allow having different user-agent http headers
  15. * improved: add a new member variable in server class to allow fine-tuning of the encoding of returned values when the server is in 'phpvals' mode
  16. * improved: allow servers in 'xmlrpcvals' mode to also register plain php functions by defining them in the dispatch map with an added option
  17. * improved: catch exceptions thrown during execution of php functions exposed as methods by the server
  18. * fixed: bad encoding if same object is encoded twice using php_xmlrpc_encode
  19. XML-RPC for PHP version 2.2.2 - 2009/03/16
  20. This release corrects all bugs that have been reported and sucesfully reproduced since
  21. version 2.2.1.
  22. Regardless of the intimidating message about dropping PHP 4 support, it still does
  23. support that ancient, broken and insecure platform.
  24. * fixed: php warning when receiving 'false' in a bool value
  25. * fixed: improve robustness of the debugger when parsing weird results from non-compliant servers
  26. * fixed: format floating point values using the correct decimal separator even when php locale is set to one that uses comma
  27. * fixed: use feof() to test if socket connections are to be closed instead of the number of bytes read (rare bug when communicating with some servers)
  28. * fixed: be more tolerant in detection of charset in http headers
  29. * fixed: fix encoding of UTF8 chars outside of the BMP plane
  30. * fixed: fix detection of zlib.output_compression
  31. * improved: allow the add_to_map server method to add docs for single params too
  32. * improved: added the possibility to wrap for exposure as xmlrpc methods plain php class methods, object methods and even whole classes
  33. XML-RPC for PHP version 2.2.1 - 2008/03/06
  34. This release corrects all bugs that have been reported and sucesfully reproduced.
  35. It is the last release of the library that will support PHP 4.
  36. * fixed: work aroung bug in php 5.2.2 which broke support of HTTP_RAW_POST_DATA
  37. * fixed: is_dir parameter of setCaCertificate() method is reversed
  38. * fixed: a php warning in xmlrpc_client creator method
  39. * fixed: parsing of '1e+1' as valid float
  40. * fixed: allow errorlevel 3 to work when prev. error handler was a static method
  41. * fixed: usage of client::setcookie() for multiple cookies in non-ssl mode
  42. * improved: support for CP1252 charset is not part or the library but almost possible
  43. * improved: more info when curl is enabled and debug mode is on
  44. XML-RPC for PHP version 2.2 - 2007/02/25
  45. This release corrects a couple of bugs and adds a few minor features.
  46. * fixed: debugger errors on php installs with magic_quotes_gpc on
  47. * fixed: support for https connections via proxy
  48. * fixed: wrap_xmlrpc_method() generated code failed to properly encode php objects
  49. * improved: slightly faster encoding of data which is internally UTF-8
  50. * improved: debugger always generates a 'null' id for jsonrpc if user omits it
  51. * new: debugger can take advantage of a graphical value builder
  52. (it has to be downloaded separately, as part of jsxmlrpc package)
  53. * new: support for the <NIL/> xmlrpc extension
  54. * new: server support for the system.getCapabilities xmlrpc extension
  55. * new: wrap_xmlrpc_method() accepts two new options: debug and return_on_fault
  56. XML-RPC for PHP version 2.1 - 2006/08/28
  57. This release corrects quite a few bugs and adds some interesting new features.
  58. There is a minor security enhancement and overall speedup too.
  59. It has been tested with PHP 4.0.5 up to 4.4.4 and 5.1.5.
  60. Please note that 404pl1 is NOT supported, and has not been since 2.0.
  61. *** PLASE READ CAREFULLY BELOW ***
  62. CHANGES THAT MIGHT AFFECT DEPLOYED APPLICATIONS:
  63. The wrap_php_function and wrap_xmlrpc_method functions have been moved out of
  64. the base library file xmlrpc.inc into a file of their own: xmlrpc_wrappers.inc.
  65. You will have to include() / require() it in your scripts if you have been using
  66. those functions.
  67. For increased security, the automatic rebuilding of php object instances out of
  68. received xmlrpc structs in wrap_xmlrpc_method() has been disabled (but it can be
  69. optionally reenabled).
  70. The constructor of xmlrpcval() values has seen major changes, and it will not
  71. throw a php warning anymore when invoked using an unknown xmlrpc type: the
  72. error will only be written to php error log. Also new xmlrpcval('true', 'boolean')
  73. is not supported anymore.
  74. MAJOR IMPROVEMENTS:
  75. The new function php_xmlrpc_decode_xml() will take the xml representation of
  76. either an xmlrpc request, response or single value and return the corresponding
  77. php-xmlrpc object instance.
  78. Both wrap_php_function() and wrap_xmlrpc_method() functions accept many more
  79. options to fine tune their behaviour, including one to return the php code to
  80. be saved and later used as standalone php script.
  81. A new function wrap_xmlrpc_server() has been added, to wrap all (or some) of the
  82. methods exposed by a remote xmlrpc server into a php class.
  83. Lib internals have been modified to provide better support for grafting extra
  84. functionality on top of it. Stay tuned for future releases of the EXTRAS package.
  85. Last but not least a new file has been added: verify_compat.php, to help users
  86. diagnose the level of compliance of the current php install with the library.
  87. CHANGELOG IN DETAIL:
  88. * fixed bug 1311927: client not playing nice with some proxy/firewall on ports != 80
  89. * fixed bug 1334340: all ereg_ functions have been replaced with corresponding preg_
  90. * fixed bug: wrong handling of 'deflate' http encoding, both server and client side
  91. * fixed bug: sending compressed responses when php output compression is enabled was not working
  92. * fixed bug: addarray() and addstruct() where not returning 1 when adding data to already initialized values
  93. * fixed bug: non-ascii chars used in struct element names where not being encoded correctly
  94. * restored compatibility with php 4.0.5 (for those poor souls still stuck on it)
  95. * server->service() now returns either the payload or xmlrpcresp instance
  96. * server->add_to_map() now accepts methods with no param definitions
  97. * added new function: php_xmlrpc_decode_xml()
  98. * added new function: wrap_xmlrpc_server()
  99. * major improvements and security enhancements to wrap_php_function() and wrap_xmlrpc_method()
  100. * documentation for single parameters of exposed methods can be added to the dispatch map
  101. (and turned into html docs in conjunction with a future release of the extras package)
  102. * full response payload is saved into xmlrpcresp object for further debugging
  103. * stricter parsing of incmoing xmlrpc messages: two more invalid cases are now detected
  104. (double data element inside array and struct/array after scalar inside value element)
  105. * debugger can now generate code that wraps a remote method into php function (works for jsonrpc, too)
  106. * debugger has better support for being activated via a single GET call (for integration into other tools?)
  107. * more logging of errors in a lot of situations
  108. * javadoc documentation of lib files almost complete
  109. * the usual amount of new testcases in the testsuite
  110. * many performance tweaks and code cleanups
  111. * added foundation for emulating the API of the xmlrpc extension (extras package needed)
  112. XML-RPC for PHP version 2.0 - 2006/04/24
  113. I'm pleased to announce XML-RPC for PHP version 2.0, final.
  114. With respect to the last release candidate, this release corrects a few small
  115. bugs and adds a couple of new features: more authentication options (digest and
  116. ntlm for servers, ntlm for proxies, and some https custom certificates stuff);
  117. all the examples have been reviewed and some demo files added,
  118. including a ready-made xmlrpc proxy (useful e.g. for ajax calls, when the xmlrpc
  119. client is a browser); the server logs more warning messages for incorrect situations;
  120. both client and server are more tolerant of commonly-found mistakes.
  121. The debugger has been upgraded to reflect the new client capabilities.
  122. In greater detail:
  123. * fixed bug: method xmlrpcval::structmemexists($value) would not work
  124. * fixed bug: wrap_xmlrpc_method would fail if invoked with a client object that
  125. has return_type=phpvals
  126. * fixed bug: in case of call to client::multicall without fallback and server error
  127. * fixed bug: recursive serialization of xmlrpcvals loosing specified UTF8 charset
  128. * fixed bug: serializing to ISO-8859-1 with php 5 would raise an error if non-ascii
  129. chars where found when decoding
  130. * new: client can use NTLM and Digest authentication methods for https and http 1.1
  131. connections; authentication to proxy can be set to NTLM, too
  132. * new: server tolerates user functions returning a single xmlrpcval object instead
  133. of an xmlrpcresp
  134. * new: server does more checks for presence and correct return type of user
  135. coded method handling functions, and logs inconsistencies to php error log
  136. * new: client method SetCaCertificate($cert, $is_dir) to validate server against
  137. * new: both server and client tolerate receiving 'true' and 'false' for bool values
  138. (which btw are not valid according to the xmlrpc spec)
  139. XML-RPC for PHP version 2.0RC3 - 2006/01/22
  140. This release corrects a few bugs and adds some interesting new features.
  141. It has been tested with PHP up to 4.4.2 and 5.1.2.
  142. * fixed bug: server not recognizing clients that declare support for http compression
  143. * fixed bug: serialization of new xmlrpcval (8, 'string') when internal encoding
  144. set to UTF-8
  145. * fixed bug: serialization of new xmlrpcval ('hello', 'int') would produce
  146. invalid xml-rpc
  147. * new: let the server accept 'class::method' syntax in the dispatch map
  148. * new: php_xmlrpc_decode() can decode xmlrpcmessage objects
  149. * new: both client and server can specify a charset to be used for serializing
  150. values instead of the default 'US-ASCII+xml-entities-for-other-characters'.
  151. Values allowed: ISO-8859-1 and UTF-8
  152. * new: the server object can register 'plain' php functions instead of functions
  153. that accept a single parameter of type xmlrpcmsg. Faster, uses less memory
  154. (but comes with minor drawbacks as well, read the manual for more details)
  155. * new: client::setDebug(2) can be used to have the request payload printed to
  156. screen before being sent
  157. * new: server::service($data) lets user parse data other than POST body, for
  158. easier testing / subclassing
  159. * changed: framework-generated debug messages are sent back by the server base64
  160. encoded, to avoid any charset/xml compatibility problem
  161. * other minor fixes
  162. The usual refactoring of a lot of (private) methods has taken place, with new
  163. parameters added to some functions.
  164. Javadoc documentation has been improved a lot.
  165. The HTML documentation has been shuffled around a bit, hoping to give it a more
  166. logical organization.
  167. The experimental support for the JSON protocol has been removed, and will be
  168. packaged as a separate download with some extra very interesting stuff (human
  169. readable auto-generated documentation, anyone?).
  170. XML-RPC for PHP version 2.0RC2 - 2005/11/22
  171. This release corrects a few bugs and adds basically one new method for better
  172. HTTPS support:
  173. * fixed two bugs that prevented xmlrpc calls to take place over https
  174. * fixed two bugs that prevented proper recognition of xml character set
  175. when it was declared inside the xml prologue
  176. * added xmlrpc_client::setKey($key, $keypass) method, to allow using client
  177. side certificates for https connections
  178. * fixed bug that prevented proper serialization of string xmlrpcvals when
  179. $xmlrpc_internalencoding was set to UTF-8
  180. * fixed bug in xmlrpc_server::echoInput() (and marked method as deprecated)
  181. * correctly set cookies/http headers into xmlrpcresp objects even when the
  182. sned() method call fails for some reason
  183. * added a benchmark file in the testsuite directory
  184. A couple of (private/protected) methods have been refactored, as well as a
  185. couple of extra parameters added to some (private) functions - this has no
  186. impact on the public API and should be of interest primarily to people extending
  187. / subclassing the lib.
  188. There is also new, PARTIAL support for the JSON-RPC protocol, implemented in
  189. two files in the extras dir (more info about json-rpc at http://json-rpc.org)
  190. XML-RPC for PHP version 2.0RC1 - 2005/10/03
  191. I'm pleased to announce XML-RPC for PHP version 2.0, release candidate 1.
  192. This release introduces so many new features it is almost impossible to list them
  193. here, making the library finally on pair with, if not more advanced than, any other
  194. similar offer (e.g. the PEAR XMLRPC package or the Incutio IXR library).
  195. No, really, trust me.
  196. The minimum supported PHP version is now 4.2 - natively - or 4.0.4pl1 - by usage of
  197. a couple of compatibility classes (code taken from PEAR php_compat package).
  198. The placement of files and directories in the distribution has been deeply modified,
  199. in the hope of making it more clear, now that the file count has increased.
  200. I hope you find it easy.
  201. Support for "advanced" HTTP features such as cookies, proxies and keep-alives has
  202. been added at last.
  203. It is now much easier to convert between xmlrpcval objects and php values, and
  204. in fact php_xmlrpc_encode and php_xmlrpc_decode are now the recommended methods
  205. for all cases, except when encoding base64 data.
  206. Two new (experimental) functions have been added, allowing automagic conversion
  207. of a php function into an xmlrpc method to be exposed and vice-versa.
  208. PHP objects can be now automatically serialized as xmlrpc struct values and
  209. correctly deserialized on the other end of the transmission, provided that the
  210. same class definition is present on both sides and no object members are of
  211. type resource.
  212. A lot of the existing class methods have been overloaded with extra parameters
  213. or new functionality, and a few added ex-novo, making usage easier than ever.
  214. A complete debugger solution is included in the distribution. It needs a web server
  215. to run (a freely available version of the same debugger is accessible online, it
  216. can be found at http://phpxmlrpc.sourceforge.net).
  217. For a more detailed list of changes, please read carefully chapter 2 of the
  218. included documentation, or, even better, take a look at the source code, which
  219. is commented in javadoc style quite a bit.
  220. XML-RPC for PHP version 1.2 - 2005/08/14
  221. This removes all use of eval(), which is a potential security problem.
  222. All users are encouraged to upgrade as soon as possible.
  223. As of this release we are no longer php3-compatible.
  224. XML-RPC for PHP version 1.1.1 - 2005/06/30
  225. This is a security vulnerability fix release.
  226. All users are invited to upgrade as soon as possible.
  227. XML-RPC for PHP version 1.1 - 2005/05/03
  228. I'm pleased to announce XML-RPC for PHP version 1.1
  229. It's taken two years to get to the this point, but here we are, finally.
  230. This is a bugfix and maintenance release. No major new features have been added.
  231. All known bugs have been ironed out, unless fixing would have meant breaking
  232. the API.
  233. The code has been tested with PHP 3, 4 and 5, even tough PHP 4 is the main
  234. development platform (and some warnings will be emitted when runnning PHP5).
  235. Notheworthy changes include:
  236. * do not clash any more with the EPI xmlrpc extension bundled with PHP 4 and 5
  237. * fixed the unicode/charset problems that have been plaguing the lib for years
  238. * proper parsing of int and float values prepended with zeroes or the '+' char
  239. * accept float values in exponential notation
  240. * configurable http user-agent string
  241. * use the same timeout on client socket reads as used for connecting
  242. * more explicative error messages in xmlrpcresponse in many cases
  243. * much more tolerant parsing of malformed http responses from xmlrpc servers
  244. * fixed memleak that prevented the client to be used in never-ending scripts
  245. * parse bigger xmlrpc messages without crashing (1MB in size or more)
  246. * be tolerant to xmlrpc responses generated on public servers that add
  247. javascript advertising at the end of hosted content
  248. * the lib generates quite a few less PHP warnings during standard operation
  249. This is the last release that will support PHP 3.
  250. The next release will include better support for PHP 5 and (possibly) a slew of
  251. new features.
  252. The changelog is available at:
  253. http://cvs.sourceforge.net/viewcvs.py/phpxmlrpc/xmlrpc/ChangeLog?view=markup
  254. Please report bugs to the XML-RPC PHP mailing list or to the sourceforge project
  255. pages at http://sourceforge.net/projects/phpxmlrpc/