PHP 5.2.8 Released! [08-Dec-2008] The PHP development team would like to announce the immediate availability of PHP 5.2.8. This release addresses a regression introduced by 5.2.7 inregard to the magic_quotes functionality, that was broken by an incorrect fix to the filter extension. All users who have upgraded to 5.2.7 are encouraged to upgrade to this release, alternatively you can apply a work-around for the bug by changing "filter.default_flags=0" in php.ini.
Nothing to worry about, since till stated, that ipsconfig does not make use of this function. (also @Till/Falko): As there is the possiblity to use 3rd party software with the ispconfig's php such as roundcube, phpmyadmin etc. i'd suggest replacing the php package inside the downloadable package and also change the necessary line in the "compile" file.
You can use the php that comes with ispconfig also for third party packages, but we dont recommend that.
If you don't recommend that, then there should be an update version of ispconfig with the newest php version or you should note anywhere that you do NOT recommend using the possiblity of packages like roundcube / phpmyadmin that are downloadbale also from the official ispconfig page.
@Till, I think Ben has right. Maybe ISPConfig does not make use of the buggy funtions of php 5.2.7, but packages like phpMyAdmin, webmail or any other application, probably might use it. Reason enough to release ISPConfig 2.2.29 i guess. Safety first!
None of the other packages is affected by this, so there is no need for an update. Nevertheless we will release an update, but there is no need to hurry and realease something untested which may harm more then it helps! The reason is very simple: magic_quotes_gpc is always off in the php.ini in ispconfig. This is the case for all packages incl. ispconfig. The bug appears only if magic_quotes_gpc is set to on, but thats not the case so neither ISPConfig nor one of the other packages are affected by this bug.