PHPSecInfo News

The first news bit was that 0.2 had been released. (Am I the only one longing for the days when we waited till 1.0 of something to release?) Here's a scrape from Ed's blog post on this exciting news

The newest version of PHPSecInfo, version 0.2, is now available. Here are the major changes:

• Added link to "more info" in output. These lead to pages on the phpsec.org site giving more details on the test and what to do if you have a problem
• Modified CSS to improve readability and avoid license issue with PHP (the old CSS was derived from the output of phpinfo())
• New test: PhpSecInfo_Test_Session_Save_Path
• Added display of "current" and "recommended" settings in test result output
• Various minor changes and bug fixes; see the CHANGELOG for details

Visit Ed's blog post for more details and links to download.

Previous to this announcement though, Ed posted Zend_Environment_Security and It's Relation to PHPSecInfo Apparently Ed has ported the tests that PHPSecInfo uses to work within the Zend Framework. Here's let's take a look at what he has to say.

Zend_Environment_Security is basically a port of the tests I've written for PhpSecInfo to work with Simon's Zend_Environment module. It does *not* replace PhpSecInfo, but rather provide a similar testing capability built into the ZFW core. PhpSecInfo could be described as the "parent" project, with Zend_Environment_Security being based on the work I do in PSI. PSI is *definitely* the core, and will for the foreseeable future take priority over any "sibling" projects.

Ed goes on to discuss why some of the tests in PHPSecInfo are not in Zend_Environment_Security. I'll leave it to you to visit his blog and check out the whole story.

=C=