Yii 1.1.18

A team of the PHP framework Yii has released a release of version 1.1.18. You can download the archive from here .

Branch 1.1 has already reached EOL . Additional fixes, if any, in terms of security and compatibility with PHP 7.

Release 1.1.18 allows you to upgrade PHP on the server with the old Yii 1.1 to the supported PHP command . Yii 1.1.18 is compatible with PHP 7.1. Security patches for this version of PHP will be released until December 1, 2019.

We recommend using Yii 2.0 for both new projects and new features in old projects on Yii 1.1. How to use Yii 2.0 in Yii 1.1 is shown in the Yii 2 manual .

Upgrading from 1.1 to 2.0, in most cases, will pull the complete rewriting of the application. Sharing two frameworks will allow you to do this iteratively, even without allocating a large budget for development.

This version includes PHP 7 compatibility fixes and two security improvements:

• CSRF tokens are now masked, allowing you to fight BREACH attacks.
• The CJavascript::quote() method now correctly escapes strings in special cases and supports more encodings.

A complete list of changes is available in the changelog .

Thanks to everyone who participated in the project . These nine years with Yii 1.x have been awesome!