You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Added PHP 8.3.27 and 8.4.14 configurations with dependencies and extension support
first release without .ber for php.ini
PR Type
Enhancement
Description
Added PHP 8.3.27 and 8.4.14 complete configurations with comprehensive settings and extension support
Created php.ini files for both versions with 1925-1959 lines of configuration including memory limits (512M), execution timeouts (60s), and file upload sizes (32M)
Configured optional extensions (imagick, memcache, xdebug) with download URLs in exts.properties files
Added bearsampp.conf files specifying executable names, configuration files, and Apache modules for both PHP versions
Created deps.properties files with ImageMagick 7.1.2-8 as a required dependency for both versions
Added pear.properties files with PEAR installer configuration for both versions
Updated bundle release version from 2025.9.24 to 2025.10.31 in build.properties
Added release entries for PHP 8.3.27 and 8.4.14 in releases.properties
Created dependency directory documentation with README.txt files explaining PECL dependency injection
First release without .ber format for php.ini files
Diagram Walkthrough
flowchart LR
A["PHP 8.3.27 & 8.4.14<br/>Release"] --> B["php.ini<br/>Configuration"]
A --> C["Extensions<br/>exts.properties"]
A --> D["Dependencies<br/>deps.properties"]
A --> E["PEAR<br/>pear.properties"]
A --> F["Bearsampp<br/>bearsampp.conf"]
B --> G["Development<br/>Environment"]
C --> G
D --> G
E --> G
F --> G
H["build.properties"] --> I["Version Update<br/>2025.10.31"]
J["releases.properties"] --> I
Loading
File Walkthrough
Relevant files
Configuration changes
12 files
php.ini
PHP 8.3.27 configuration file with extensions and settings
bin/php8.3.27/php.ini
Added comprehensive PHP 8.3.27 configuration file with 1959 lines of settings
Configured core PHP directives including memory limits (512M), execution timeouts (60s), and file upload sizes (32M)
Below is a summary of compliance checks for this PR:
Security Compliance
⚪
Verbose error display
Description: Error display is enabled via display_errors = On and display_startup_errors = On, which can disclose sensitive information in production environments. php.ini [500-510]
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
Information disclosure
Description:expose_php = On reveals PHP presence/version in headers, aiding fingerprinting of the stack in production. php.ini [396-399]
Referred Code
; http://php.net/expose-phpexpose_php = On
;;;;;;;;;;;;;;;;;;;
Excessive attack surface
Description: Loads many extensions by default which increases attack surface; ensure only needed extensions are enabled in production. php.ini [918-958]
Referred Code
;; Notes for Windows environments :;; - Many DLL files are located in the extensions/ (PHP 4) or ext/ (PHP 5+); extension folders as well as the separate PECL DLL download (PHP 5+).; Be sure to appropriately set the extension_dir directive.;;extension=bz2extension=curl
;extension=ffi;extension=ftpextension=fileinfo
extension=gd
extension=gettext
;extension=gmpextension=intl
extension=imap
;extension=ldapextension=mbstring
;extension=exifextension=mysqli
... (clipped 20 lines)
Performance-related risk
Description: OPCache is explicitly disabled (opcache.enable=0 and opcache.enable_cli=0), which may lead to performance issues and encourage misconfigurations to re-enable it insecurely; review intended production defaults. php.ini [1761-1769]
Referred Code
zend_extension = "~BEARSAMPP_LIN_PATH~/bin/php/php8.3.27/ext/php_opcache.dll"[opcache]; Determines if Zend OPCache is enabledopcache.enable=0
; Determines if Zend OPCache is enabled for the CLI version of PHPopcache.enable_cli=0
Session entropy
Description:session.sid_bits_per_character = 5 and session.sid_length = 26 are acceptable but shorter than defaults; consider stronger settings to reduce session ID predictability risk. php.ini [1511-1514]
Follow the guide to enable codebase context checks.
Custom Compliance
🟢
Generic: Meaningful Naming and Self-Documenting Code
Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting
Status: Passed
🔴
Generic: Secure Error Handling
Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging.
Status: Verbose errors: User-facing error display is enabled (display_errors=On and display_startup_errors=On), which risks exposing internal details contrary to secure error handling guidance.
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
⚪
Generic: Comprehensive Audit Trails
Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance.
Status: Error visibility: The configuration enables verbose error display (display_errors=On and display_startup_errors=On) which is suitable for development but does not implement or reference an audit logging mechanism for critical actions, and may not be appropriate for production.
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
Generic: Robust Error Handling and Edge Case Management
Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation
Status: Startup errors on: The php.ini sets display_errors=On and display_startup_errors=On, which is development-oriented; without context of deployment environment this may indicate insufficiently robust production error handling practices.
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
Generic: Secure Logging Practices
Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data.
Status: Log destination: Logging is enabled (log_errors=On) but the explicit secure log destination is commented out, leaving ambiguity about log handling and potential exposure.
Referred Code
log_errors = On
; Set maximum length of log_errors. In error_log information about the source is; added. The default is 1024 and 0 allows to not apply any maximum length at all.; http://php.net/log-errors-max-lenlog_errors_max_len = 1024
; Do not log repeated messages. Repeated errors must occur in same file on same; line unless ignore_repeated_source is set true.; http://php.net/ignore-repeated-errorsignore_repeated_errors = Off
; Ignore source of message when ignoring repeated messages. When this setting; is On you will not log errors with repeated messages from different files or; source lines.; http://php.net/ignore-repeated-sourceignore_repeated_source = Off
; If this parameter is set to Off, then memory leaks will not be shown (on; stdout or in the log). This is only effective in a debug compile, and if; error reporting includes E_WARNING in the allowed list
... (clipped 57 lines)
Generic: Security-First Input Validation and Data Handling
Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities
Status: URL fopen enabled: The configuration enables allow_url_fopen=On which can increase risk if not paired with strict input validation and stream handling, though actual application code is not shown.
Referred Code
; http://php.net/allow-url-fopenallow_url_fopen = On
; Whether to allow include/require to open URLs (like http:// or ftp://) as files.; http://php.net/allow-url-includeallow_url_include = Off
; Define the anonymous ftp password (your email address). PHP's default setting
Compliance status legend
🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label
Description:include_path and extension_dir reference previous version directories (php8.3.26) which may cause loading mismatched binaries, potentially leading to unstable or unsafe behavior.
;***** Added by go-pearinclude_path=".;~BEARSAMPP_LIN_PATH~/bin/php/php8.3.26/pear/pear";*****;; PHP's default setting for include_path is ".;/path/to/php/pear"; http://php.net/include-path; The root of the PHP pages, used only if nonempty.; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root; if you are running php as a CGI under any web server (other than IIS); see documentation for security issues. The alternate is to use the; cgi.force_redirect configuration below; http://php.net/doc-rootdoc_root =
; The directory under which PHP opens the script using /~username used only; if nonempty.; http://php.net/user-diruser_dir =
; Directory in which the loadable extensions (modules) reside.
... (clipped 6 lines)
⚪
Information disclosure
Description: PHP exposure header is enabled via expose_php = On, which unnecessarily reveals PHP version information to clients and can aid attackers in fingerprinting. php.ini [395-399]
Referred Code
; on your server or not.; http://php.net/expose-phpexpose_php = On
;;;;;;;;;;;;;;;;;;;
Verbose error display
Description: Error display is enabled in development config (display_errors = On and display_startup_errors = On), which can leak sensitive data if used in production. php.ini [500-510]
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
Insecure configuration placeholder
Description: Placeholder @PHP_EXTENSIONS@ remains in extensions section, which may lead to unintended dynamic loading behavior or misconfiguration if not sanitized. php.ini [956-958]
Referred Code
;extension=xsl
@PHP_EXTENSIONS@
Disabled opcode cache
Description: OPCache is explicitly disabled (opcache.enable=0 and opcache.enable_cli=0), which can increase attack surface via repeated parsing and reduce performance; verify this is intended for production. php.ini [1761-1769]
Referred Code
zend_extension = "~BEARSAMPP_LIN_PATH~/bin/php/php8.3.26/ext/php_opcache.dll"[opcache]; Determines if Zend OPCache is enabledopcache.enable=0
; Determines if Zend OPCache is enabled for the CLI version of PHPopcache.enable_cli=0
Untrusted binaries
Description: Xdebug artifacts are alpha versions and memcache DLLs are downloaded from external URLs; using pre-release debugging extensions in production can introduce instability and potential vulnerabilities. exts.properties [1-3]
Description: Xdebug is enabled by default (zend_extension = "xdebug" and xdebug.mode = debug), which can leak debug information and significantly impact performance and security in production environments. php.ini [1951-1959]
Follow the guide to enable codebase context checks.
Custom Compliance
🟢
Generic: Meaningful Naming and Self-Documenting Code
Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting
Status: Passed
🔴
Generic: Secure Error Handling
Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging.
Status: Verbose errors: User-facing error display is enabled via display_errors = On and display_startup_errors = On, which can expose internal details and violates secure error handling guidance.
Referred Code
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
⚪
Generic: Comprehensive Audit Trails
Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance.
Status: Audit logging: The PR adds configuration files without implementing application-level logging of critical actions, so it is unclear whether audit trails for sensitive operations are produced elsewhere.
Referred Code
[PHP];;;;;;;;;;;;;;;;;;;; About php.ini ;;;;;;;;;;;;;;;;;;;;; PHP's initialization file, generally called php.ini, is responsible for; configuring many of the aspects of PHP's behavior.; PHP attempts to find and load this configuration from a number of locations.; The following is a summary of its search order:; 1. SAPI module specific location.; 2. The PHPRC environment variable. (As of PHP 5.2.0); 3. A number of predefined registry keys on Windows (As of PHP 5.2.0); 4. Current working directory (except CLI); 5. The web server's directory (for SAPI modules), or directory of PHP; (otherwise in Windows); 6. The directory from the --with-config-file-path compile time option, or the; Windows directory (usually C:\windows); See the PHP docs for more specific information.; http://php.net/configuration.file
... (clipped 1938 lines)
Generic: Robust Error Handling and Edge Case Management
Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation
Status: Error handling: The PR primarily introduces configuration; it does not show application error handling or edge case management, leaving compliance indeterminate from the diff.
Referred Code
[PHP];;;;;;;;;;;;;;;;;;;; About php.ini ;;;;;;;;;;;;;;;;;;;;; PHP's initialization file, generally called php.ini, is responsible for; configuring many of the aspects of PHP's behavior.; PHP attempts to find and load this configuration from a number of locations.; The following is a summary of its search order:; 1. SAPI module specific location.; 2. The PHPRC environment variable. (As of PHP 5.2.0); 3. A number of predefined registry keys on Windows (As of PHP 5.2.0); 4. Current working directory (except CLI); 5. The web server's directory (for SAPI modules), or directory of PHP; (otherwise in Windows); 6. The directory from the --with-config-file-path compile time option, or the; Windows directory (usually C:\windows); See the PHP docs for more specific information.; http://php.net/configuration.file
... (clipped 1938 lines)
Generic: Secure Logging Practices
Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data.
Status: Log config unset: Logging is enabled (log_errors = On) but no structured logging or redaction settings are evident and error_log is commented, so secure logging practices cannot be confirmed from the config alone.
Referred Code
log_errors = On
; Set maximum length of log_errors. In error_log information about the source is; added. The default is 1024 and 0 allows to not apply any maximum length at all.; http://php.net/log-errors-max-lenlog_errors_max_len = 1024
; Do not log repeated messages. Repeated errors must occur in same file on same; line unless ignore_repeated_source is set true.; http://php.net/ignore-repeated-errorsignore_repeated_errors = Off
; Ignore source of message when ignoring repeated messages. When this setting; is On you will not log errors with repeated messages from different files or; source lines.; http://php.net/ignore-repeated-sourceignore_repeated_source = Off
; If this parameter is set to Off, then memory leaks will not be shown (on; stdout or in the log). This is only effective in a debug compile, and if; error reporting includes E_WARNING in the allowed list
... (clipped 57 lines)
Generic: Security-First Input Validation and Data Handling
Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities
Status: Input validation: The PR adds PHP configurations (e.g., enabling URL fopen, upload limits) but does not include application code showing validation/sanitization or parameterized queries, so compliance cannot be determined from the diff.
Referred Code
; Whether to allow HTTP file uploads.; http://php.net/file-uploadsfile_uploads = On
; Temporary directory for HTTP uploaded files (will use system default if not; specified).; http://php.net/upload-tmp-dirupload_tmp_dir = "~BEARSAMPP_LIN_PATH~/tmp"; Maximum allowed size for uploaded files.; http://php.net/upload-max-filesizeupload_max_filesize = 32M
; Maximum number of files that can be uploaded via a single requestmax_file_uploads = 20
;;;;;;;;;;;;;;;;;;; Fopen wrappers ;;;;;;;;;;;;;;;;;;;
... (clipped 93 lines)
; OPCache
-zend_extension = "~BEARSAMPP_LIN_PATH~/bin/php/php8.3.27/ext/php_opcache.dll"+; Use platform-appropriate extension filename. For Linux/Unix use .so; for Windows use .dll.+; Example for Linux:+zend_extension = "~BEARSAMPP_LIN_PATH~/bin/php/php8.3.27/ext/php_opcache.so"
[opcache]
; Determines if Zend OPCache is enabled
opcache.enable=0
; Determines if Zend OPCache is enabled for the CLI version of PHP
opcache.enable_cli=0
Apply / Chat
Suggestion importance[1-10]: 8
__
Why: The suggestion correctly identifies a platform mismatch between the file extension (.dll for Windows) and the path placeholder (~BEARSAMPP_LIN_PATH~ for Linux), which would cause the OPcache extension to fail to load.
Medium
Set CA bundle for TLS
Set the openssl.cafile directive to point to a bundled CA certificate file to ensure TLS verification works reliably in portable environments.
[openssl]
-; The location of a Certificate Authority (CA) file on the local filesystem-; to use when verifying the identity of SSL/TLS peers. Most users should-; not specify a value for this directive as PHP will attempt to use the-; OS-managed cert stores in its absence. If specified, this value may still-; be overridden on a per-stream basis via the "cafile" SSL stream context-; option.-;openssl.cafile=+; Use a bundled CA file to ensure SSL/TLS peer verification works in portable environments.+openssl.cafile="~BEARSAMPP_LIN_PATH~/certs/cacert.pem"+; Alternatively (or additionally), set a hashed CA directory if available.+;openssl.capath="~BEARSAMPP_LIN_PATH~/certs/ca"-; If openssl.cafile is not specified or if the CA file is not found, the-; directory pointed to by openssl.capath is searched for a suitable-; certificate. This value must be a correctly hashed certificate directory.-; Most users should not specify a value for this directive as PHP will-; attempt to use the OS-managed cert stores in its absence. If specified,-; this value may still be overridden on a per-stream basis via the "capath"-; SSL stream context option.-;openssl.capath=-
Apply / Chat
Suggestion importance[1-10]: 7
__
Why: The suggestion correctly points out a potential for TLS verification failures in portable environments by not setting openssl.cafile, which improves the robustness and security of the configuration.
Medium
Security
Disable error display output
Disable display_errors and display_startup_errors to prevent sensitive information disclosure through error messages.
-display_errors = On-display_startup_errors = On+display_errors = Off+display_startup_errors = Off
Apply / Chat
Suggestion importance[1-10]: 7
__
Why: This is a valid security suggestion to prevent sensitive information leakage, which is crucial even in development environments that might be inadvertently exposed.
Medium
Hide PHP version exposure
Disable expose_php to prevent leaking the PHP version in HTTP headers for improved security.
Why: The suggestion provides a valid security hardening recommendation by disabling expose_php, which helps to reduce the server's attack surface by not revealing the PHP version.
Low
General
Normalize boolean directive value
Change the value of output_buffering from off to the canonical Off for better consistency with PHP INI standards.
Why: The suggestion is correct that Off is the canonical value for boolean directives in php.ini, and using it improves consistency, though off is also a valid value and works correctly.
✅ Correct version in extension directorySuggestion Impact:The commit updated extension_dir from php8.4.13 to php8.4.14 as suggested, and also adjusted related include_path and zend_extension paths.
Why: This is a critical configuration bug that prevents PHP from loading any extensions, breaking core functionality for the php8.4.14 installation.
High
✅ Correct version in Zend extensionSuggestion Impact:The commit updated the zend_extension path to point to php8.4.14 instead of php8.4.13, matching the suggestion.
Why: This is a critical configuration error that will prevent the OPcache extension from loading, as it points to an incompatible version and breaks a key performance feature.
High
✅ Correct version in include pathSuggestion Impact:The include_path was updated from php8.4.13 to php8.4.14 as suggested; additional related paths (extension_dir and zend_extension) were also updated.
Why: This is a critical configuration error that points to the wrong PHP version's PEAR directory, which will break PEAR functionality for this PHP instance.
High
✅ Correct PHP version in include pathSuggestion Impact:The commit updated the include_path from php8.3.26 to php8.3.27 exactly as suggested, and also updated related paths (extension_dir and zend_extension) to 8.3.27.
Why: The suggestion correctly identifies a path misconfiguration for include_path which points to an older PHP version, likely causing runtime errors when loading PEAR packages.
Medium
✅ Correct PHP version in extension directorySuggestion Impact:The commit updated extension_dir from php8.3.26 to php8.3.27 as suggested, and also adjusted related include_path and zend_extension paths.
Why: The suggestion correctly identifies a path misconfiguration for extension_dir which points to an older PHP version, which would prevent PHP extensions from being loaded.
Medium
✅ Correct PHP version in Zend extension pathSuggestion Impact:The commit updated the OPCache zend_extension path from php8.3.26 to php8.3.27 as suggested (and also updated related include_path and extension_dir).
Why: The suggestion correctly identifies that the zend_extension path for OPCache points to an incorrect PHP version directory, which would prevent this critical performance extension from loading.
Medium
High-level
Use templates for configuration files
The two new php.ini files are nearly identical and contain copy-paste errors in version paths. To fix this and improve maintainability, use a templating system to generate these configuration files from a single, shared template.
include_path=".;~BEARSAMPP_LIN_PATH~/bin/php/php8.3.26/pear/pear";*****;; PHP's default setting for include_path is ".;/path/to/php/pear"; http://php.net/include-path; The root of the PHP pages, used only if nonempty.; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root; if you are running php as a CGI under any web server (other than IIS); see documentation for security issues. The alternate is to use the
... (clipped 15 lines)
include_path=".;~BEARSAMPP_LIN_PATH~/bin/php/php8.4.13/pear/pear";*****;; PHP's default setting for include_path is ".;/path/to/php/pear"; http://php.net/include-path; The root of the PHP pages, used only if nonempty.; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root; if you are running php as a CGI under any web server (other than IIS); see documentation for security issues. The alternate is to use the
... (clipped 15 lines)
Solution Walkthrough:
Before:
# File: bin/php8.3.27/php.ini
...
# Incorrect version in pathinclude_path=".;~BEARSAMPP_LIN_PATH~/bin/php/php8.3.26/pear/pear"
...
# Incorrect version in pathextension_dir = "~BEARSAMPP_LIN_PATH~/bin/php/php8.3.26/ext"
...
# File: bin/php8.4.14/php.ini
...
# Incorrect version in pathinclude_path=".;~BEARSAMPP_LIN_PATH~/bin/php/php8.4.13/pear/pear"
...
# Incorrect version in pathextension_dir = "~BEARSAMPP_LIN_PATH~/bin/php/php8.4.13/ext"
...
After:
# File: templates/php.ini.tpl
...
include_path=".;~BEARSAMPP_LIN_PATH~/bin/php/{{PHP_VERSION}}/pear/pear"
...
extension_dir = "~BEARSAMPP_LIN_PATH~/bin/php/{{PHP_VERSION}}/ext"
...
# Build script logic:# for each version in [8.3.27, 8.4.14, ...]:# template = read('templates/php.ini.tpl')# content = template.replace('{{PHP_VERSION}}', version)# write(f'bin/php{version}/php.ini', content)
Suggestion importance[1-10]: 9
__
Why: The suggestion correctly identifies critical copy-paste errors in the new php.ini files where paths point to incorrect PHP versions, and it proposes a valid architectural improvement to prevent such errors and reduce maintenance.
Here are some key observations to aid the review process:
⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪
🧪 No relevant tests
🔒 Security concerns
Sensitive configuration exposure: The php.ini defaults enable displaying errors and startup errors, which can leak sensitive info in production. Additionally, expose_php=On reveals PHP presence/version. Consider setting display_errors=Off, display_startup_errors=Off, and expose_php=Off for production presets.
Error display is enabled (display_errors=On, display_startup_errors=On) and expose_php=On in a config that may be used beyond dev; confirm these are gated per environment or set to Off for production builds.
display_errors = On
; The display of errors which occur during PHP's startup sequence are handled; separately from display_errors. We strongly recommend you set this to 'off'; for production servers to avoid leaking configuration details.; Default Value: On; Development Value: On; Production Value: Off; http://php.net/display-startup-errorsdisplay_startup_errors = On
Ensure placeholders like @PHP_EXTENSIONS@ and BEARSAMPP_LIN_PATH are reliably substituted at build/runtime; otherwise extensions and paths (ext, tmp, pear) may fail to resolve.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
User description
Added PHP 8.3.27 and 8.4.14 configurations with dependencies and extension support
first release without .ber for php.ini
PR Type
Enhancement
Description
Added PHP 8.3.27 and 8.4.14 complete configurations with comprehensive settings and extension support
Created
php.inifiles for both versions with 1925-1959 lines of configuration including memory limits (512M), execution timeouts (60s), and file upload sizes (32M)Enabled essential PHP extensions:
curl,fileinfo,gd,gettext,intl,mbstring,mysqli,openssl,pdo_mysql,pdo_pgsql,pdo_sqlite,pgsql,sodiumConfigured optional extensions (
imagick,memcache,xdebug) with download URLs inexts.propertiesfilesAdded
bearsampp.conffiles specifying executable names, configuration files, and Apache modules for both PHP versionsCreated
deps.propertiesfiles with ImageMagick 7.1.2-8 as a required dependency for both versionsAdded
pear.propertiesfiles with PEAR installer configuration for both versionsUpdated bundle release version from
2025.9.24to2025.10.31inbuild.propertiesAdded release entries for PHP 8.3.27 and 8.4.14 in
releases.propertiesCreated dependency directory documentation with
README.txtfiles explaining PECL dependency injectionFirst release without
.berformat forphp.inifilesDiagram Walkthrough
File Walkthrough
12 files
php.ini
PHP 8.3.27 configuration file with extensions and settingsbin/php8.3.27/php.ini
settings
execution timeouts (60s), and file upload sizes (32M)
mbstring, mysqli, openssl, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql,
sodium
display_errors on, and xdebug debugging support
releases.properties
Added PHP 8.3.27 and 8.4.14 release URLsreleases.properties
(2025.10.31)
(2025.10.31)
exts.properties
PHP 8.3.27 extensions configuration and download URLsbin/php8.3.27/exts.properties
imagick,memcache, andxdebugextensions with theirrespective download URLs
exts.properties
PHP 8.4.14 extensions configuration and download URLsbin/php8.4.14/exts.properties
imagick,memcache, andxdebugextensions with theirrespective download URLs
bearsampp.conf
PHP 8.3.27 Bearsampp bundle configurationbin/php8.3.27/bearsampp.conf
php.exe,php-win.exe), configuration file(
php.ini), and Apache module (php8apache2_4.dll)bearsampp.conf
PHP 8.4.14 Bearsampp bundle configurationbin/php8.4.14/bearsampp.conf
php.exe,php-win.exe), configuration file(
php.ini), and Apache module (php8apache2_4.dll)deps.properties
PHP 8.3.27 dependencies configurationbin/php8.3.27/deps.properties
dependency
deps.properties
PHP 8.4.14 dependencies configurationbin/php8.4.14/deps.properties
dependency
build.properties
Updated bundle release version to 2025.10.31build.properties
2025.9.24to2025.10.31pear.properties
PHP 8.3.27 PEAR installer configurationbin/php8.3.27/pear.properties
install-pear-nozlib.pharfrom GitHubreleases
pear.properties
PHP 8.4.14 PEAR installer configurationbin/php8.4.14/pear.properties
install-pear-nozlib.pharfrom GitHubreleases
php.ini
PHP 8.4.14 development configuration with extensions and debuggingbin/php8.4.14/php.ini
settings
memory_limit = 512M,max_execution_time = 60, andpost_max_size = 32Mcurl,fileinfo,gd,gettext,intl,mbstring,mysqli,openssl,pdo_mysql,pdo_pgsql,pdo_sqlite,pgsql,sodiumenabled (
display_errors = On,log_errors = On) and xdebug extensionfor debugging
with
~BEARSAMPP_LIN_PATH~placeholder for dynamic path substitution2 files
README.txt
PHP 8.3.27 dependencies directory documentationbin/php8.3.27/deps/README.txt
injected into PATH
README.txt
PHP 8.4.14 dependencies directory documentationbin/php8.4.14/deps/README.txt
injected into PATH