This document summarizes notable updates in the PHP community from last month. It discusses recent patch releases of PHP 5 and 7 that users should upgrade to for security fixes. It also covers security issues with ImageMagick and recommendations for mitigation. Upcoming features in PHP 7.1 are outlined. Updates to frameworks like CakePHP, Laravel, Symfony, and Zend are mentioned. Notable conferences in the coming months are listed.

1. Last Month in PHP
June 2016
Kansas City PHP User Group

2. PHP Patch Releases
PHP 7.0.8 - Upgrade!
● Security fixes
● See: php.net/ChangeLog-7.
php#7.0.8
PHP 5.6.23 - Upgrade!
● Security fixes
● See: php.net/ChangeLog-5.
php#5.6.23
PHP 5.5.37 - Upgrade!
● Security fixes
● See: php.net/ChangeLog-5.
php#5.5.37

3. Security Bulletin...
ImageMagick
● Remote Code Execution
● Mitigation recommendation:
○ Sandbox ImageMagick
■ If you find a good way to do this, it might make a good KCPUG talk!
○ Update your policy.xml file.
■ See: imagetragick.com

4. Upcoming Features via PHP RFC
Replace "Missing argument" warning with "Too few arguments" exception
● Target: PHP 7.1
● tl;dr: execution happens with warning, but not with exception
● See: https://wiki.php.net/rfc/too_few_args

5. Upcoming Features via PHP RFC
Add curl_multi_errno(), curl_share_errno()
and curl_share_strerror()
● Target: PHP 7.1
● tl;dr: some curl error functions were
missing
● See: https://wiki.php.net/rfc/too_few_args
Adds methods in bold:

6. Upcoming Features via PHP RFC
Fix inconsistent behavior of $this variable
● Target: PHP 7.1
● tl;dr: reduce stupidity of $this as var
● Note: many BC breaks, all are good
● See: wiki.php.net/rfc/this_var
Note: Examples stolen directly from the RFC :)

7. PHP-Framework Interoperability Group
Two proposals have entered “draft” status
● Simple Cache
○ Adds a simpler layer on top of PSR-6
○ Does NOT replace PSR-6
○ See: github.com/dragoonis/fig-standards/blob/psr-simplecache/proposed/simplecache.md
● HTTP Factories
○ Defines factory interfaces for PSR-7
○ See: github.com/php-fig/fig-standards/blob/master/proposed/http-factory/http-factory.md
● See: php-fig.org/psr

8. CMSes: Drupal
Drupal 8.1.[2, 3] & 7.4.4
● Patch Release
○ Security Release
■ Drupal 7: (Users module) Saving user accounts can sometimes grant the user all roles
■ Drupal 8: (Views module) Views can allow unauthorized users to see Statistics
information
○ See: drupal.org/SA-CORE-2016-002

9. CMSes: WordPress
WordPress 4.5.3
● Security release - Upgrade!
○ Fixes:
■ 2 XSS vulnerabilities
■ Redirect bypass
■ oEmbed DOS
■ and more...
● See: wordpress.org/news/2016/06/wordpress-4-5-3/

10. Frameworks - CakePHP
CakePHP 3.2.11 & 2.8.5
● Some bugfix and maintenance updates
● See:
○ bakery.cakephp.org/2016/06/20/cakephp_3211_released.html
○ bakery.cakephp.org/2016/06/12/cakephp_285_released.html

11. Frameworks - Laravel
Laravel 5.2.[36, 37, 38, 39]
● Bugfix and maintenance updates
● See: github.com/laravel/framework/blob/master/CHANGELOG.md

12. Frameworks - Symfony
Symfony [3.1.1, 3.0.7, 2.8.7, 2.7.14]
● Many bugfixes
● See:
○ symfony.com/blog/symfony-3-1-1-released
○ symfony.com/blog/symfony-3-0-7-released
○ symfony.com/blog/symfony-2-8-7-released
○ symfony.com/blog/symfony-2-7-14-released

13. Frameworks - Zend
ZF 3 Released!
● PHP7 support
● Up to 4X faster applications under PHP 5, and even better performance under
PHP 7!
● Documentation is now included within each component repository
● PSR-7 (HTTP messaging interfaces) features:
○ Diactoros - a PSR-7 HTTP message implementation
○ Stratigility - middleware foundation for building and dispatching middleware pipelines
○ Expressive - a PSR-7 middleware microframework
● See: framework.zend.com/blog/2016-06-28-zend-framework-3.html

14. PHP: The Right Way
● Fixed syntax of vhost snippet for Xdebug
○ See: phptherightway.com/#xdebug
● Fixed capitalization for "PHP" and "PaaS" on the index page
● Changed dead link to live link for “PHP Devs to Follow” and corrected a
spelling error
○ See: phptherightway.com/#people_to_follow
● Note: Every open-source project can use your help with documentation. What
are you waiting for?

15. PHP Conferences
php[cruise]
● July 17-24 - Bahamas
● 10% Discount Code for our UG:
REDACTED
● See: cruise.phparch.com
Laracon US
● July 27-29 - Louisville, KY
● See: laracon.us
Midwest.io
● August 20-23 - Kansas City, MO
● See: midwest.io
Pacific Northwest PHP 2016
● Sept 15-17 - Seattle, WA
● See: pnwphp2016.dryfta.com

16. PHP Conferences - Continued
StrangeLoop
● Sept 15-17 - St. Louis, MO
● See: thestrangeloop.com
International PHP Conference
● Oct 23-27 - Munich, Germany
● See: phpconference.com/en/
True North PHP
● Nov 3-5 - Toronto, Canada
● See: truenorthphp.ca
ZendCon
● Nov 18-21 - Las Vegas, NV
● See: zendcon.com

17. Nomad PHP (Online) - July 28
Nomad PHP EU - 01:00 PM CDT
Grown-up MongoDB: Schema Design
● Derick Rethans (@derickr)
● See: nomadphp.com/grown-mongodb-
schema-design
Nomad PHP US - 08:00 PM CDT
How the 3rd Normal Form Destroyed a
Family
● Chuck Reeves (@manchuck)
● See: nomadphp.com/3rd-normal-form-
destroyed-family

18. Next Month in KCPHPUG
● Looking for Speakers!
● Nomad PHP edition?
● Hack Night?