Latest releases of http_request2

HTTP_Request2 2.7.0

2025-04-06T09:52:59-05:00

Added:
* Tested on PHP 8.4;
* Psalm 6 used for static analysis;
* Updated Public Suffix List.

Fixed:
* Prevent XSS when PHP files backing server-side tests are served from
a publicly available website, thanks to Peter Potrowl
(peter017 at gmail dot com) for the report.
* data/generate-list.php will only run with a command-line SAPI.
* Better random value used for `cnonce` parameter in Digest authentication,
see https://github.com/pear/HTTP_Request2/issues/30.
Digest authentication should be considered deprecated, however.

HTTP_Request2 2.6.0

2023-11-01T16:04:51-05:00

* Tested on PHP 8.2 and 8.3
* Use psalm for static analysis, several minor issues fixed
* Correctly parse HTTP status line with an empty reason-phrase
(see https://github.com/pear/HTTP_Request2/pull/26)
* Updated Public Suffix List

HTTP_Request2 2.5.1

2022-01-06T13:23:50-05:00

* The package runs under PHP 8.1 without `E_DEPRECATED` messages
https://github.com/pear/HTTP_Request2/issues/25
* Updated Public Suffix List

HTTP_Request2 2.5.0

2021-07-12T10:15:07-05:00

Fixed
* Socket adapter will now retry writing to socket rather than throw an exception if `fwrite()` call
returns zero written bytes
https://github.com/pear/HTTP_Request2/issues/23

Changed
* Socket adapter will use only TLS 1.2 and TLS 1.3
(the latter is available on PHP 7.4+)
* Upgraded tests for PHPUnit 9 compatibility, PHPUnit Polyfills package
is used to run them on PHP 5.6 to PHP 8
* Test suite now runs on Github Actions rather than on Travis
* Updated Public Suffix List

HTTP_Request2 2.4.2

2020-09-24T18:13:28-05:00

Socket adapter could prematurely end receiving the response body due to
fread() call returning an empty string

HTTP_Request2 2.4.1

2020-08-01T05:16:08-05:00

Switch socket to blocking mode when enabling crypto, this fixes HTTPS requests
through proxy with Socket adapter
https://github.com/pear/HTTP_Request2/issues/20

HTTP_Request2 2.4.0

2020-07-26T13:43:57-05:00

* Minimum required version is now PHP 5.6, as using older versions for HTTPS
requests may be insecure
* Removed support for magic_quotes_runtime, as get_magic_quotes_runtime()
was deprecated in PHP 7.4 and the functionality itself was disabled
since PHP 5.4 (bug #23839)
* Socket adapter now uses socket in non-blocking mode, as some configurations
could have problems with timeouts in HTTPS requests (bug #21229)
* Fixed bogus size check error with gzipped responses larger than 4 GiB
uncompressed (bug #21239)
* Use current "Intermediate compatibility" cipher list
* Updated Public Suffix List

The package is now 100% autoload-compatible, when installed with composer it
no longer uses include-path and does not contain require_once statements

HTTP_Request2 2.3.0

2016-02-13T15:24:52-05:00

New features:
* New observer that can do on-the-fly decoding of compressed responses,
see HTTP_Request2_Observer_UncompressingDownload.
Thanks to Delian Krustev for initial implementation.
* CookieJar can now silently ignore invalid cookies with $jar->ignoreInvalidCookies(true);
instead of throwing an exception. See requests #19937 and #20401
* Adapters now dispatch a new 'warning' event, e.g. in case of incomplete response
body or broken 'chunked' encoding. Exception was thrown previously by Socket adapter
in the latter case, see bug #20228
* Improved security of HTTPS requests in Socket adapter
- Use 'tls://' instead of 'ssl://' in connection string to prevent fallback to
known insecure versions, use only TLS when enabling crypto via proxy (see bug #20462)
- On PHP 5.6+ require using only TLS 1.1 and TLS 1.2
- Do not use insecure ciphers
* Improved test suite, network-backed tests now run on Travis CI

Changes and fixes:
* Curl adapter failed to send PUT request body with 'follow_redirects' on (bug #20440)
* Curl adapter supplied invalid cookie domain to CookieJar after redirect (bug #20561)
* Curl adapter now properly dispatches events while sending the request
* mime_content_type() returning false was handled incorrectly when guessing content-type
* Use 'peer_name' and 'verify_peer_name' SSL context options on PHP 5.6+
instead of deprecated 'CN_match'
* Public Suffix List updated to current version, its download location changed

Note to Composer users: next package version will probably get rid of 'include-path'
setting in composer.json favour of using autoloader.

HTTP_Request2 2.2.1

2014-01-16T19:53:35-05:00

* Fixed a bogus timeout Exception in Socket adapter after waiting for
"100 Continue" response: the same one-second timeout was used
for further socket operations if explicit 'timeout' parameter was not set.
Thanks to Andrea Brancatelli (abrancatelli at schema31 dot it) for the report.
* Bundled a separate LICENSE file (request #20175). Updated phrasing and links
to mention 3-Clause BSD license the package actually uses.

HTTP_Request2 2.2.0

2014-01-13T10:06:56-05:00

New features
* Socket adapter will send "Expect: 100-continue" header and wait for
"100 Continue" response by default before sending large request body
(request #19233). This can be disabled by setting an empty "Expect"
header, the same way as done with Curl adapter (see bug #15937)
* It is possible to specify a local IP address to bind to using 'local_ip'
configuration parameter (request #19515)

Other changes and fixes
* An infinite loop was possible when using a stream wrapper instead of
a regular file with MultipartBody (bug #19934)
* Socket adapter will properly send chunked request body if
"Transfer-Encoding: chunked" header is set for the request (bug #20125)
* Updated Public Suffix List to the latest version and updated its download script
* Unit tests fixes