简体繁体 English

为旧版本的Zend Framework开发是否安全？

[英]Is it safe to develop for older versions of Zend Framework?

原文 2010-04-21 15:35:45 0 5 php/ zend-framework

Our vendor-supported server's O/S only supports PHP 5.1.6, which limits us to ZF 1.6. 我们的供应商支持的服务器的操作系统仅支持PHP 5.1.6，这将我们限制为ZF 1.6。 The current version of Zend Framework requires a higher version of PHP. 当前版本的Zend Framework需要更高版本的PHP。

We're struggling to decide whether to adopt ZF because of this incompatibility. 由于这种不兼容，我们正在努力决定是否采用ZF。 Is it feasible to develop (indefinitely) in these older versions of ZF or should we hold off? 在这些旧版本的ZF中（无限期）开发是否可行，还是我们应该推迟？

Features, security, bugs, etc. Is this a path we don't want to go down or are these older versions perfectly usable in a production environment? 功能，安全性，错误等。这是我们不想走的路，还是这些较旧的版本在生产环境中完美可用？

5 个解决方案

You can develop in them as long as you want but 1.6 is, I think, around 2 years old. 您可以根据需要在其中进行开发，但我认为1.6大约已经2岁了。 There have been security fixes that you would probably want to take advantage of and a LOT of new features. 有一些您可能想利用的安全修复程序以及许多新功能。 As with any software it's usually a good idea to be relatively close to the most current version. 与任何软件一样，相对接近最新版本通常是一个好主意。

Since you say PHP 5.1.6 I am assuming CentOS or RHEL. 因为您说的是PHP 5.1.6，所以我假设使用CentOS或RHEL。 If so, you could install Zend Server or Zend Server CE (free) and be right up to the most current version of PHP. 如果是这样，您可以安装Zend Server或Zend Server CE（免费），并安装最新版本的PHP。

What a pity. 太遗憾了。 There were lots of structural changes implemented in 1.7 that may not necessarily break backwards compatibility (I am not sure), but certainly changed some structural stuff.. for instance, the new Zend_Loader_Autoloader, and some stuff with bootstraps. 在1.7中实现了许多结构上的更改，这些更改不一定会破坏向后兼容性（我不确定），但是肯定会更改某些结构上的内容，例如新的Zend_Loader_Autoloader和一些带有引导程序的内容。

I believe Zend releases security updates for most things 1.x ( see the svn repository ). 我相信Zend会针对大多数1.x版本发布安全更新（请参阅svn存储库）。

Bug fixes in ZF are released in newer version of ZF and they are not "backported" to earlier releases. ZF中的错误修复程序在ZF的较新版本中发布，并且未“反向移植”到较早的版本中。

PHP 5.1.6 was released more that 3 and a half years ago. PHP 5.1.6的发布已超过三年半了。 Zend Framework 1.6 is also ancient. Zend Framework 1.6也是古老的。 If you need vendor support you should go with Kevins advice and use Zend Server. 如果需要供应商支持，则应遵循Kevins的建议并使用Zend Server。 If even that is not a possibility I would seriously think about changing your vendor provider if possible. 如果那是不可能的话，我会认真考虑如果可能的话，请更改您的供应商。

At this point in time, ZF isn't quite as mature and stable as something like ASP.NET (where many companies still use 2.0, when 4.0 was just released). 在这个时候，ZF还不如ASP.NET那样成熟和稳定（ASP.NET（许多公司在4.0发布时仍使用2.0）。

I can't say I would recommend developing exclusively with ZF 1.6 until you know you'll have a clear path to upgrade down the road. 我不能说我建议只使用ZF 1.6进行开发，直到您知道自己有明确的升级途径。

You may want to investigate frameworks whose current versions support PHP 5.1.6, or switch vendors. 您可能想研究当前版本支持PHP 5.1.6的框架，或者切换供应商。

检查Zend框架php版本，以获取每个Zend框架组件的最低php版本为最新版本：1.10.4