Skip to content

Release 1.0.4: verified PHP security repair and persistent PDO MySQL - #1

Merged
jhd3197 merged 2 commits into
mainfrom
dev
Oct 23, 2026
Merged

jhd3197 merged 2 commits into
mainfrom
dev

Conversation

@jhd3197

@jhd3197 jhd3197 commented Oct 23, 2026

Copy link
Copy Markdown
Owner

Existing sites can update PHP within the same branch. Build a patched runtime before replacing only WordPress, preserve mounted files and database services, and verify live PHP, PDO, readiness and HTTP. Failures attempt recovery with the retained previous image and report that security repair was not applied.

Includes persistent PDO MySQL, session upload protection, WordPress 7.1.3 / PHP 8.3 new-site defaults, removal of PHP 8.1 from offered versions, and the earlier WP-CLI temporary-download fix. Bumps the extension to 1.0.4.

Validation: runtime failure-boundary tests, existing PHP-limit/site-surface tests, frontend build, and real Docker/Apache verification of PHP 8.3.36 and PDO MySQL.

Existing sites require Update PHP in their PHP tab after updating the extension. Host PHP-FPM and custom images need separate maintenance.

Refs jhd3197/ServerKit#181 and jhd3197/ServerKit#177.

curl -O saved wp-cli.phar into the panel process's working directory,
its backend/, and a failed privileged move left the 7 MB file there;
it was once committed to the panel repo. Download into a private temp
dir that is always removed.
@jhd3197
jhd3197 merged commit 4a00a22 into main Oct 23, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant