php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #70577 Windows download page should list sha2, not just sha1
Submitted: 2015-09-24 22:40 UTC Modified: 2017-07-12 14:39 UTC
From: jb-sitecomments at wisemo dot com Assigned: ab (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS: Windows
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: jb-sitecomments at wisemo dot com
New email:
PHP Version: OS:

 

 [2015-09-24 22:40 UTC] jb-sitecomments at wisemo dot com 
Description:
------------
The download page http://windows.php.net/download/ lists SHA1 sums for each download.  SHA1 is weak and should not really be used (except as a service to those who have no better choice).

I would thus respectfully suggest that the page also lists checksums with a more current algorithm, such as SHA256.



Test script:
---------------
http://windows.php.net/download/

Expected result:
----------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f
    sha256: 0d17882e2c05b68d5faf9296b3057c87157247027de2a7d5bdf844e3a56ab8fc

etc.

Actual result:
--------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f

etc.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2017-07-12 14:39 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2017-07-12 14:39 UTC] ab@php.net 
Fixed. Thanks.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Thu Nov 20 17:00:01 2025 UTC