PHP 7.4: Deprecations

[ayeshrajans]

PHP 7.4 deprecates some functionalities, and Travis builds are currently not even completing properly due to the amount of warnings thrown.

We already have a few tickets (thanks to @jrfnl - 👏👏👏). I will post patches related to PHP 7.4 deprecation changes (​https://wiki.php.net/rfc/deprecations_php_7_4) here.

[SergeyBiryukov]

Related:

#47704

PHP 7.4: Fix issues regarding accessing null/bool/etc as if they were an array

#47746

PHP 7.4 compatibility fix / implode argument order

#47751

PHP 7.4 compatibility fix / accessing arrays/string using curly brace syntax

#47783

PHP 7.4: Deprecations

#49945

PHP 7.4+ notice in getid3_mp3::MPEGaudioHeaderValid()

#50197

PHP 7.4 Compatibility with WP 5.4.1 – problem with seems_utf8()

#53160

PHP 7.4 map_deep compatibility issue

[jrf]

Another related ticket:

• #47441 PHP 7.4: use of deprecated operator precedence

Travis builds are currently not even completing properly due to the amount of warnings thrown

This is due to the commits related to ​PHP 7.4 deprecations having gone in this Monday.

All other issues from before then have already been addressed in the above tickets, including patching up external dependencies.

Note: as the related external dependencies have not (yet) released new versions, those dependencies in core have not been updated yet.
See the above mentioned tickets, most notably #47746 and #47751

A scan with the bleeding edge version of the ​PHPCompatibility scanner - i.e. including the open PRs ​#844 and ​#847 - should be able to detect most issues as all the sniffs regarding PHP deprecations which can be detected with a static scanner, have already been written.

[ayeshrajans]

PHP 7.4 deprecates get_magic_quotes_gpc and get_magic_quotes_runtime. This was long due, and there are few issues in Trac about removing this functionality. Historically, those bits were there because we supported PHP 5.2-5.4, when magic quotes were being used in the wild.

With WordPress no longer supporting PHP versions < 5.6, we can now remove these checks completely.

There are 3 patches following this comment:

1. Fixes in WordPress core: 47783-magic_quotes_deprecation-wp-core.patch

This fixes all magic quote calls in core.

2. Fixes in external libs: Getid3: 47783-magic_quotes_deprecation-getid3.patch

This has come up in other tickets, and I think we can follow the same conclusion in other tickets whether we maintain our fork, or try to push upstream to update.

3. Fixes in external libs: PHPMaier: 47783-magic_quotes_deprecation-phpmailer.patch

PHPMailer is an active project, so I opened a PR ​https://github.com/PHPMailer/PHPMailer/pull/1794 with the same patch. We are using v5.2.2, although latest version is 5.2.7 in upstream.

[ayeshrajans]

Thanks @jrf - I was watching those tickets, and except for 3 instances in wordpress-importer plugin, all tests pass with your patches 👍. Thank you.

Current Travis build on 7.4snapshot: ​https://travis-ci.org/Ayesh/wordpress-develop/jobs/564094819

[jrf]

getID3 is also an active project and has already accepted ​patches regarding the curly braces issue: ​https://github.com/JamesHeinrich/getID3

except for 3 instances in wordpress-importer plugin, all tests passes with your patches

The WordPress Importer issue the Core unit tests are running into has been fixed downstream already, there is just no new release yet: ​https://github.com/WordPress/wordpress-importer/pull/53

Other than that: if you want to keep track of how ready PHPCompatibility is, follow this ticket: ​#808

[jrf]

Reviewed 47783-magic_quotes_deprecation-wp-core.patch and looks sane to me.

get_magic_quotes_gpc() will always return false on PHP 5.4+, so removing the conditions related to this completely is the right course of action.

---

Reviewed 47783-magic_quotes_deprecation-getid3.patch and looks sane to me.

---

Reviewed 47783-magic_quotes_deprecation-phpmailer.patch and IMO, all references to magic quotes in the encodeFile() function can be removed as get_magic_quotes_runtime() will always return false on PHP 5.4+.
I.e.:

• The code line now touched + the whole condition block below it.
• The condition block a few lines further down.

PHPMailer currently has a ​minimum PHP requirement of PHP 5.5.0, so these changes can be safely made.

---

Refs:

• ​https://www.php.net/manual/en/function.get-magic-quotes-gpc.php
• ​https://www.php.net/manual/en/function.get-magic-quotes-runtime.php
• ​https://wiki.php.net/rfc/deprecations_php_7_4#magic_quotes_legacy

[ayeshrajans]

Thank you.
In the PHPMailer patch PHP_VERSION_ID < 70400 is supposed to prevent the get_magic_quotes_runtime() function from being called (so avoid the the deprecation notice), and still keep the $magic_quotes variable false. The idea was to not remove the $magic_quotes variable and two de-slash if blocks below it.

PHPMailer 5.2-stable branch doesn't show a lot of activity, so I tried to keep the PR as minimal as possible. This branch also supports PHP >= 5.0.0 (​https://github.com/PHPMailer/PHPMailer/blob/5.2-stable/composer.json#L24). Only 6.x versions require PHP 5.5 minimum, and magic_quotes functionality is gone in those versions.

[jrf]

Replying to ayeshrajans:

Thank you.
In the PHPMailer patch PHP_VERSION_ID < 70400 is supposed to prevent the get_magic_quotes_runtime() function from being called (so avoid the the deprecation notice), and still keep the $magic_quotes variable false. The idea was to not remove the $magic_quotes variable and two de-slash if blocks below it.

PHPMailer 5.2-stable branch doesn't show a lot of activity, so I tried to keep the PR as minimal as possible. This branch also supports PHP >= 5.0.0 (​https://github.com/PHPMailer/PHPMailer/blob/5.2-stable/composer.json#L24). Only 6.x versions require PHP 5.5 minimum, and magic_quotes functionality is gone in those versions.

In that case, as the minimum PHP version for WP is now 5.6, the PHPMailer patch should not be necessary and we should just upgrade PHPMailer to v 6.x.

[jrf]

I've done a quick scan and - while already silenced - it looks like the wp-admin/includes/class-plzip.php file, which is also an external dependency, also contains some magic quote related code round lines 5341/5345/5376.

[ayeshrajans]

Replaces 47783-magic_quotes_deprecation-wp-core.patch. PHPDoc for map_deep() function is updated to reflect the changes.

[ayeshrajans]

Juliette - Thanks you are right PclZip was missing in the patches. This one does it, and it turned out to be a rather big patch because the library had 2 methods to disable and swam back magic quotes functionality. Since this class is from 2009, there is no access indivators. However, I decided to remove the methods themselves and the class property because they started with name priv in properties, and the class property wasn't used anywhere else.

[chesio]

Replying to jrf:

In that case, as the minimum PHP version for WP is now 5.6, the PHPMailer patch should not be necessary and we should just upgrade PHPMailer to v 6.x.

Related: #40472, #41750 and #45822

[jorbin]

In 46105:

GENERAL: Remove magic quote functions

The path to magic quote sanity took a fun and exciting turn: PHP core removed it and WordPress updated the minimum version.

For the formally external pclzip, the code is commented out to make investigating easier and in case we ever need to merge upstream (if that still exists) changes.

Props ayeshrajans, jrf, jorbin.
See #47783.
Fixes #18322.

[jorbin]

Keeping this open until we have updated the external libraries.

[jrf]

FYI: ​https://github.com/JamesHeinrich/getID3/issues/200

Also: the code in GetID3 master does not contain the magic quotes related code anymore, so no additional patching should be needed once a new version has been tagged.

[jrf]

GetID3 update ticket: #43836

[jorbin]

In 46112:

Update getID3 library to fix issues with PHP7.4

Updates to trunk version that includes fixes for PHP7.4

Changelog:
​https://github.com/JamesHeinrich/getID3/compare/v1.9.14...00f3fbfd77e583099ca70a3cf0bc092e113d2b20

See: #47751,#47783.
Fixes: #48040.

[jorbin]

In 46113:

Comment out magic quote functions

Follow up to r46112.

See: #47751,#47783, #48040.

[pierlo]

Replying to jrf:

Also: the code in GetID3 master does not contain the magic quotes related code anymore, so no additional patching should be needed once a new version has been tagged.

GetID3 v2 now has its own namespace, and relies on Composer for autoloading. I guess a custom autoloader will be needed to use it.

[jrf]

Summary of current status of this ticket:

• Everything has been addressed, safe for the PHPMailer issues.
• PHPMailer has been updated to v 5.2.27 in [46097] via #40472.
• #41750 is open to update PHPMailer to v 6.x

#41750 is milestoned for WP 5.3. If it lands in time, that should solve the remaining issue. If not, the PHPmailer patch in this ticket may need a refresh and should probably be applied.

[davidbaumwald]

@jrf Since #41750 was moved to 5.4, should this be punted as well so that they land together?

[jrf]

@davidbaumwald No, this should not be punted.

As #41750 was punted, the 47783-magic_quotes_deprecation-phpmailer.patch patch should be applied for WP 5.3 to allow WP 5.3 to be compatible with PHP 7.4 when it comes out

The patch may need a refresh after the PHPMailer upgrade from #40472 though.

[davidbaumwald]

Replying to jrf:

@davidbaumwald No, this should not be punted.

As #41750 was punted, the 47783-magic_quotes_deprecation-phpmailer.patch patch should be applied for WP 5.3 to allow WP 5.3 to be compatible with PHP 7.4 when it comes out

The patch it may need a refresh after the PHPMailer upgrade from #40472 though.

Got it. Thanks for the clarification. ;)

[jrf]

Refreshed patch for PHPMailer PHP 7.4 compatibility

[jrf]

The patch I uploaded just now should apply cleanly and should be applied ASAP (as the upgrade to PHPMailer 6.0 won't happen in WP 5.3 anymore).

[desrosj]

In 46378:

General: Patch PHMailer for PHP 7.4 compatibility.

This patches the PHPMailer library in Core to be PHP 7.4 compatible by adding a version check before calling get_magic_quotes_runtime().

Props ayeshrajans, jrf.
See #47783.

[desrosj]

I believe that everything that can be addressed has been addressed here or in a separate ticket. Marking as a close. If someone else could run through and confirm there are no more changes needed and close out.

Also, just marking needs-dev-note because there will be a PHP 7.4 related note.

[jrf]

@desrosj Confirmed. Everything in this ticket has been addressed AFAICS.

[desrosj]

Dev note: ​https://make.wordpress.org/core/2019/10/11/wordpress-and-php-7-4/

[nico23]

So this is shipped in stable WP? Because I am getting tons of "Function get_magic_quotes_gpc() is deprecated" notices during phpunit testing of my plugin on php7.4

[SergeyBiryukov]

Replying to nico23:

So this is shipped in stable WP?

Yes, WordPress core no longer calls get_magic_quotes_gpc() anywhere as of version 5.3.

[nico23]

Sorry brainfart. I was actually not running the latest WP in /tmp/wordpress. Those files are kept even after reboot on Linux. For some reason I always thought they get deleted on reboot, just learning this is not even the case on Windows so its probably on all OS that they are kept for a time period. At least I learned something new.