WPIntell

Source evidence

PHP 8.2 warnings/errors in plugin

Patchstack – WordPress & Plugins Security · support · 2024-09-06T09:15:00+00:00

mixedsentiment
mediumseverity
0.78relevance
2replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
dmpinder resolved
Hi, When checking your plugin for PHP 8.2 compatibility, these warnings and errors are found. Can you please update your plugin to be fully compatible with 8.2 and preferably 8.3 as well? FILE: public/app/plugins/patchstack/includes/2fa/polyfill/lib/byte_safe_strings.php ------------------------------------------------------------------------------------------------------------------------ FOUND 2 ERRORS AND 2 WARNINGS AFFECTING 2 LINES ------------------------------------------------------------------------------------------------------------------------ 33 | WARNING | INI directive 'mbstring.func_overload' is deprecated since PHP 7.2 and removed since PHP 8.0 | | (PHPCompatibility.IniDirectives.RemovedIniDirectives.mbstring_func_overloadDeprecatedRemoved) 33 | ERROR | The constant "MB_OVERLOAD_STRING" is removed since PHP 8.0 | | (PHPCompatibility.Constants.RemovedConstants.mb_overload_stringRemoved) 87 | WARNING | INI directive 'mbstring.func_overload' is deprecated since PHP 7.2 and removed since PHP 8.0 | | (PHPCompatibility.IniDirectives.RemovedIniDirectives.mbstring_func_overloadDeprecatedRemoved) 87 | ERROR | The constant "MB_OVERLOAD_STRING" is removed since PHP 8.0 | | (PHPCompatibility.Constants.RemovedConstants.mb_overload_stringRemoved) ------------------------------------------------------------------------------------------------------------------------ FILE: public/app/plugins/patchstack/includes/2fa/polyfill/lib/random_bytes_mcrypt.php ------------------------------------------------------------------------------------------------------------------------ FOUND 3 ERRORS AFFECTING 1 LINE ------------------------------------------------------------------------------------------------------------------------ 60 | ERROR | Function mcrypt_create_iv() is deprecated since PHP 7.1 and removed since PHP 7.2; Use random_bytes() or | | OpenSSL instead (PHPCompatibility.FunctionUse.RemovedFunctions.mcrypt_create_ivDeprecatedRemoved) 60 | ERROR | Extension 'mcrypt' is deprecated since PHP 7.1 and removed since PHP 7.2; Use openssl (preferred) or | | pecl/mcrypt once available instead | | (PHPCompatibility.Extensions.RemovedExtensions.mcryptDeprecatedRemoved) 60 | ERROR | The constant "MCRYPT_DEV_URANDOM" is deprecated since PHP 7.1 and removed since PHP 7.2 | | (PHPCompatibility.Constants.RemovedConstants.mcrypt_dev_urandomDeprecatedRemoved) ------------------------------------------------------------------------------------------------------------------------ Hello, The files that were detected with your script are part of a “polyfill”. The purpose of a polyfill is to provide backwards compatibility to older PHP versions which is why it is referencing to functions that may no longer be supported. It does not actually call these functions on newer PHP versions and should not be a cause of concern. Thanks for the update!

Comments

2 shown
Patchstack 2024-09-09T11:01:00+00:00

Hello, The files that were detected with your script are part of a “polyfill”. The purpose of a polyfill is to provide backwards compatibility to older PHP versions which is why it is referencing to functions that may no longer be supported. It does not actually call these functions on newer PHP versions and should not be a cause of concern.

dmpinder 2024-09-09T15:44:00+00:00

Thanks for the update!