• Registered: 2015-07-26
  • Posts: 7

Topic: Outdated PHP version

Hello, I purchased Showkase Pro Bundle for $95 dollars on 01/14/2016.  In 2021 I received a free upgrade to Version 1.7.6 [25 March 2021], which is compatible with PHP 8. 
Currently PHP is 8.4, making PHP 8 outdated.  According to your website, this is the most updated version. When I purchased the bundle, you promised to provide free upgrades within the same major version up to v1.9.  As of today, you are still promising the same support.
When is the newer version of Showcase Pro Bundle that is compatible with PHP that is higher than 8.0 is coming?

  • Registered: 2012-12-16
  • Posts: 981

Re: Outdated PHP version

Hi.

I'm not responsible for the wording of the upgrade FAQ but I think it means that if or when there is an upgrade (and as long as the upgrade version is labelled 1.x and not 2.x), then the upgrade will be free. Sorry if there is any confusion there.

It's certainly a shame there have not been any official updates to Showkase recently but I have taken it upon myself (as an official member of the Showkase support team) to keep Showkase up-to-date (with an unofficial patch). It's unofficial as I'm not the author of Showkase and no one asked me to do this but I have tested it quite thoroughly myself and I'd recommend that you try it.

The patch fixes bugs, updates internal libraries and ensures compatibility with PHP 8.4.

You can find a download link (and instructions on how to apply the patch) here.

If you have any questions about the patch, give me a shout. Thanks!

  • Registered: 2015-07-26
  • Posts: 7

Re: Outdated PHP version

Thank you, Steven.  That's too bad, developers are not making newer versions for showcase.

  • Registered: 2015-09-19
  • Posts: 30

Re: Outdated PHP version

Thank you Steven for your Support and maintenance efforts.

  • Registered: 2012-12-16
  • Posts: 981

Re: Outdated PHP version

You're welcome!

I'll soon release a new version of the patch with a fix for the upcoming PHP 8.5. (Just a quick fix to address a deprecation.) The new version will also update PHPMailer for the Contact Page.

  • Registered: 2015-09-19
  • Posts: 30

Re: Outdated PHP version

Steven @ Showkase wrote:

I'll soon release a new version of the patch with a fix for the upcoming PHP 8.5. (Just a quick fix to address a deprecation.) The new version will also update PHPMailer for the Contact Page.

Maybe related to the following alert?

Code injection vulnerability in PHPMailer (CVE-2020-36326 - An external file could be unexpectedly executable if it was used as a path to an attachment file via PHP's support for .phar files`. Exploitation requires that an attacker was able to provide an unfiltered path to a file to attach. CVE-2018-19296 - Was vulnerable to an object injection attack by passing phar:// paths into addAttachment() and other functions that could receive unfiltered local paths, possibly lead to RCE.)

  • Registered: 2012-12-16
  • Posts: 981

Re: Outdated PHP version

The security advisory you refer to was fixed in PHPMailer v6.4.1. See here for details: https://github.com/PHPMailer/PHPMailer/ … tag/v6.4.1

The current version of my patch (found here) includes PHPMailer v6.10.0 so as long as you have my patch installed, you'll be fine.