PHP4 vs. PHP5 and doing better version numbering

dschargel · **PHP4 vs. PHP5 and doing better version numbering -** 15-05-2008, 04:34 PM

I am all for progress, but currently my servers are forced to be PHP4 as there are other PHP applications that cannot be upgraded. I will be addressing that in December 2008, but in the meantime, I am with PHP4 and 3.20.04.

BUT...what happens if there are needs to be a security update to the PHP4 code?!?!

There have already been a couple of security vulnerability alerts (that appear in US-CERT or Bugtraq) for Kayako in the past and, if any new ones are found, it is unreasonable to force clients to choose between upgrading the server to PHP5 or using an unsecure application.

My simple recommendation is that Kayako has the new PHP5 version be named 3.30.

This will allow for any short-term 3.20.0X versions that will simply be security fixes for those of us temporarily stuck with PHP4.

David

**Jamie Edwards** · 15-05-2008, 05:33 PM

Hi David,

In the case of vulnerabilities, it is most likely we'll provide individual patch instructions.

craigbrass · 15-05-2008, 05:48 PM

I do agree a minor version is unusual to introduce this major change.

**Jamie Edwards** · 15-05-2008, 06:33 PM

Why is that? Version numbers reflect the magnitude of changes in the software; the change which requires PHP5.1 is comparitavely tiny.

craigbrass · 15-05-2008, 06:41 PM

The change which requires it may be small, but forcing users to change for a minor version is unusual to do.

dschargel · 16-05-2008, 04:00 AM

The fact of the matter is that everyone is forced to upgrade to at least PHP 5.1 if they want to use this 'minor' update.

By not jumping forward a version sequence, you guys are leaving yourselves no options (if forced to issue a security fix for the 3.20.02 sequence). That's all I'm pointing out.

Jamie, think about it and please pass it on to others so they can see the reasoning within.

David

craigbrass · 16-05-2008, 07:55 AM

Yea. I think this release needs to become 3.30.00

dschargel · 16-05-2008, 04:23 PM

Anyone else have thoughts to this?

efisher · 16-05-2008, 05:55 PM

Quote:

Originally Posted by craigbrass

Yea. I think this release needs to become 3.30.00

I agree. It is a simple adjustment and would be appropriate as there are many sites not able to run PHP5 yet.

**Jamie Edwards** · 16-05-2008, 06:06 PM

Quote:

Originally Posted by dschargel

The fact of the matter is that everyone is forced to upgrade to at least PHP 5.1 if they want to use this 'minor' update.

Hi David; I appreciate that. However, changing the version number isn't going to make the release any more major than what it is. I am also unsure why people would feel more pressure to upgrade to a minor version as opposed to a new 'major' version.

craigbrass · 16-05-2008, 06:38 PM

Because minors are considered bug fix / security releases....

**Jamie Edwards** · 07:20 PM

And that is what 3.20.03 will be - a bug fix release, more than anything else.

efisher · 16-05-2008, 07:15 PM

Quote:

Originally Posted by Jamie Edwards

And what is what 3.20.03 will be - a bug fix release, more than anything else.

That's how I would see it. Any bug fixes related to the last major version that supports PHP4.

craigbrass · 16-05-2008, 07:23 PM

Quote:

That's how I would see it. Any bug fixes related to the last major version that supports PHP4.

Yep, exactly.

**Jamie Edwards** · 07:26 PM

Quote:

Originally Posted by efisher

That's how I would see it. Any bug fixes related to the last major version that supports PHP4.

Ok, I'll take this on board and discuss it with the developers. Thank you for the insights - feedback is always welcomed

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

craigbrass Offline Senior Member Posts: 5,072 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	15-05-2008, 05:48 PM I do agree a minor version is unusual to introduce this major change. Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

craigbrass Offline Senior Member Posts: 5,072 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	15-05-2008, 06:41 PM The change which requires it may be small, but forcing users to change for a minor version is unusual to do. Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

craigbrass Offline Senior Member Posts: 5,072 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	16-05-2008, 07:55 AM Yea. I think this release needs to become 3.30.00 Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger

dschargel Offline New Member Posts: 5 Join Date: Jul 2007 Owned License	16-05-2008, 04:23 PM Anyone else have thoughts to this?

craigbrass Offline Senior Member Posts: 5,072 Join Date: Jun 2005 Location: Cumbria, UK SupportSuite Owned License	16-05-2008, 06:38 PM Because minors are considered bug fix / security releases.... Craig Brass - Kayako Forum Squatter (Note: I am NOT a staff member) Icon Headquarters - Its Elixir - Web2Messenger