PHP 7.2 UPGRADE NOTES 1. Backward Incompatible Changes 2. New Features 3. Changes in SAPI modules 4. Deprecated Functionality 5. Changed Functions 6. New Functions 7. New Classes and Interfaces 8. Removed Extensions and SAPIs 9. Other Changes to Extensions 10. New Global Constants 11. Changes to INI File Handling 12. Windows Support 13. Other Changes ======================================== 1. Backward Incompatible Changes ======================================== - Core: . gettype() will now return "resource (closed)" instead of "unknown type" for closed resources. . is_object() will now return true for objects of class __PHP_Incomplete_Class. . Support for Netware operating systems have been removed. . Casting arrays to objects (with (object) or settype()) will now covert integer keys to string property names. This fixes the behaviour of previous versions, where integer keys would become inaccessible properties with integer names. . Casting objects to arrays (with (array) or settype()), and retrieving object properties in an array with get_object_vars(), will now convert numeric string property names (that is, property names of the format /^(0|(-?[1-9][0-9]*))$/ where PHP_INT_MIN <= n <= PHP_INT_MAX) to integer keys. This fixes the behaviour of previous versions, where numeric string property names would become inaccessible string keys. . Minimum supported Windows versions are Windows 7/Server 2008 R2. - BCMath: . The bcmod() function no longer truncates fractional numbers to integers. As such, its behavior now follows fmod() rather than the `%` operator. For example `bcmod('4', '3.5')` now returns '0.5' instead of '1'. - Hash: . The hash_hmac(), hash_hmac_file() and hash_pbkdf2() functions no longer accept non-cryptographic hashes. - PCRE: . preg_match() and other PCRE functions now distinguish between unmatched subpatterns and empty matches by reporting NULL and "" (empty string), respectively. Formerly, either was reported as empty string. - Session: . Removed register_globals related code and "!" can be used as $_SESSION key name. . Session is made to manage session status corretly and prevents invalid operations. Only inappropriate codes are affected by this change. If you have problems with this, it means you have problem in your code. . Functions are made to set or return correct session status. session_start(), session_status(), session_regenerate_id() . Functions are made to return bool from null. These functions have void parameter and void parameter is checked. session_unset(), session_write_close()/session_commit(), session_abort(), session_reset() . Functions prohibit invalid operations with regard to session status and HTTP header status, returns correct bool return value. session_start(), session_set_cookie_params(), session_name(), session_module_name(), session_set_save_handler(), session_regenerate_id(), session_cache_limiter(), session_cache_expire(), session_unset(), session_destroy(), session_write_close()/session_commit(), session_reset() . INI value change by ini_set() returns update status correctly.　Invalid INI modifications are checked and made to fail. session.name, session.save_path, session.cookie_lifetime, session.cookie_path, session.cookie_domain, session.cookie_httponly, session.cookie_secure, session.use_cookies, session.use_only_cookies, session.use_strict_mode, session.referer_check, session.cache_limiter, session.cache_expire, session.lazy_write, session.save_handler, session.serialize_handler, session.gc_probability, session.gc_divior, session.gc_maxlifetime, . Some E_ERRORs are changed to E_WARNING since session status is managed correctly. session_start() . Session no longer initialize $_SESSION for invalid and useless session. session_start() ======================================== 2. New Features ======================================== - PCRE: . Added `J` modifier for setting PCRE_DUPNAMES. - Standard: . Simplified password hashing API updated to support Argon2i hashes when PHP is compiled with libargon2 (https://wiki.php.net/rfc/argon2_password_hash). . proc_nice() is now supported on Windows platforms. ======================================== 3. Changes in SAPI modules ======================================== ======================================== 4. Deprecated Functionality ======================================== - GD: . png2wbmp() and jpeg2wbmp() have been deprecated, and will be removed as of PHP 8.0.0. ======================================== 5. Changed Functions ======================================== - Standard: . password_hash() can generate Argon2i hashes when the algorithm is set to PASSWORD_ARGON2I. When using PASSWORD_ARGON2I, the following cost factors may be set: 'memory_cost', 'time_cost', and 'threads'. These cost factors will default to 'PASSWORD_ARGON2_DEFAULT_MEMORY_COST', 'PASSWORD_ARGON2_DEFAULT_TIME_COST', and 'PASSWORD_ARGON2_DEFAULT_THREADS' respectively if not set. . password_verify() can verify Argon2i hashes. . password_get_info() and password_needs_rehash() can accept Argon2i hashes. . mail()/mb_send_mail() accept array $extra_header. Array paramter is checked against RFC 2822. Array format is $extra_headers = [ 'Header-Name' => 'Header value', 'Multiple' => ['One header', 'Another header'], 'Multiline' = "FirstLine\r\n SecondLine", ]; . count() now raises a warning when an invalid parameter is passed. Only arrays and objects implementing the Countable interface should be passed. . pack() and unpack() now support float and double in both little and big endian. - XML: . utf8_encode() and utf8_decode() have been moved to the Standard extension as string functions. ======================================== 6. New Functions ======================================== - Core: . Added stream_isatty(). . Added sapi_windows_vt100_support(). - GD: . Added imagesetclip() and imagegetclip(). . Added imageopenpolygon(). . Added imageresolution(). . Added imagecreatefrombmp() and imagebmp(). - Mbstring: . Added mb_chr() and mb_ord(). . Added mb_scurb() that scrub broken multibyte strings. - Sockets: . Added socket_addrinfo_lookup(), socket_addrinfo_connect(), socket_addrinfo_bind() and socket_addrinfo_explain(). ======================================== 7. New Classes and Interfaces ======================================== ======================================== 8. Removed Extensions and SAPIs ======================================== - Mcrypt: . The deprecated mcrypt extension has been moved to PECL. . libmcrypt has not been maintained since 2007 and the continued use of this extension is strongly discouraged. . Users are advised to use alternatives such as OpenSSL or libsodium. ======================================== 9. Other Changes to Extensions ======================================== - EXIF: . Added extended exif tag support for the following formats: Samsung, DJI, Panasonic, Sony, Pentax, Minolta & Sigma/Foveon. - GD: . Removed --enable-gd-native-ttf configuration option which was unused as of PHP 5.5.0 anyway. . imagegd() stores truecolor images as real truecolor images. Formerly, they have been converted to palette. . imageantialias() is now also available if compiled with a system libgd. - Mbstring . mb_check_encoding() accepts array parameter. Both key and value ecodings are checked recursively. . mb_convert_encoding() accepts array parameter. Only value encodings are converted recursively. ======================================== 10. New Global Constants ======================================== - Core: . PHP_FLOAT_DIG number of decimal digits, that can be rounded into a float and back without precision loss . PHP_FLOAT_EPSILON smallest representable positive number x, so then x + 1.0 != 1.0 . PHP_FLOAT_MIN min representable float number . PHP_FLOAT_MAX max representable float number - Fileinfo: . FILEINFO_EXTENSION include list of possible file extensions - GD: . IMG_EFFECT_MULTIPLY . IMG_BMP - Standard: . PASSWORD_ARGON2_DEFAULT_MEMORY_COST . PASSWORD_ARGON2_DEFAULT_TIME_COST . PASSWORD_ARGON2_DEFAULT_THREADS . PASSWORD_ARGON2I ======================================== 11. Changes to INI File Handling ======================================== - sql.safe_mode . This INI directive have been removed. - realpath_cache_size . Set to 4096k by default ======================================== 12. Windows Support ======================================== - Support for VT100 console mode On systems starting with 10.0.10586, cmd.exe supports ANSI escape sequences. The corresponding console mode is enabled by default on CLI on suitable systems. As well, the function sapi_windows_vt100_support() is provided, to control and query the corresponding information in the scripts. ======================================== 13. Other Changes ========================================