How can update PHP for cwpsrv

Hello everyone,

I search how can i update PHP for cwpsrv in folder /usr/local/cwp/php71
I want PHP version >= 7.3 for installing Roundcube version 1.6.1

But i don't understand how can i update this ...

Thanks for your help

Jordan

Although labeled 7.1, it is actually PHP 7.2. We are all waiting on an official upgrade. At this point, as of Nov 2022, PHP 7.x tree is EOL, so we need to be moving on to PHP 8.1.

Hi,

Thanks for your reply.

So there is no way to update PHP by ourselves, we absolutely have to wait for an official update ?

Any idea of the official update date ? because I haven't seen anything about it for php.

Jordan

cwpsrv uses its own internal build of PHP 7.2 (labeled php71) so as to maintain usability no matter what you do with PHP selectors or php-fpm. Absolutely I am running php-ftp 8.1 on my servers and my sites run that version. But you can't upgrade the internal cwpsrv version yourself or you risk breaking everything.

CWP provides a script for updating to the 1.4.x branch of Roundcube:

Code: [Select]

sh /scripts/mail_roundcube_update
But you can update Roundcube yourself to 1.5.0, per Sandeep's directions:
https://www.uxlinux.com/upgrade-to-roundcube-version-mail-on-cwp-centos-webpanel/

https://forum.centos-webpanel.com/index.php?topic=12064.msg43232#msg43232
I've been waiting for an update like this for months.
May there be an update sooner than the discovered CVEs in Roundcube.

Is it possible to completely remove Roundcube?

sure, if you want the nuclear option:
rm -rf the roundcube directory, drop the roundcube DB, and disable the webmail portions of your vhost config files.
But you could simply just block :2095 and :2096 in the firewall for now. (But just say NO to plain http:// connections and don't use :2095 anyway!)

Hi,

Thanks for your reply.

So there is no way to update PHP by ourselves, we absolutely have to wait for an official update ?

Any idea of the official update date ? because I haven't seen anything about it for php.

Jordan

I think CWP should update the PHP version of CWP core from 7.2 to 8.x

Is there a date for this?

No word yet on that. I have offered to be an CWP EL9 beta tester, but no confirmation on that either.

You cannot update CWP's PHP, because of the ioncube encoder.  It will probably be months, as a complete rewrite for PHP8 will be required, as well as they have to pay to get the newest encoder for PHP 8.2/8.3.