<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks a lot!</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
It works fine very well with QuickPlot also</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<img style="max-width: 529px;" size="13081" data-outlook-trace="F:1|T:1" src="cid:dfc71971-05c8-4f13-9259-0b17d4e903d8"></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Br, Dan</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td>
<div id="x_signature-365-signature" style="margin: 0cm;">
<div style="margin: 0cm 0px; font-family: "Lucida Sans"; font-size: 8pt; color: black;">
<br>
</div>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Från:</b> gordon.luckett@arrowgeomatics.com <gordon.luckett@arrowgeomatics.com><br>
<b>Skickat:</b> den 21 oktober 2026 21:42<br>
<b>Till:</b> MapGuide Users Mail List <mapguide-users@lists.osgeo.org><br>
<b>Kopia:</b> Dan Nilsson <Dan.Nilsson@tyrens.se><br>
<b>Ämne:</b> Re: [mapguide-users] Patching PHP Vulnerabilities in MapGuide OS</font>
<div> </div>
</div>
<div>
<div style="background-color:#F1F0EA; width:100%; font-size:12pt; line-height:20pt; font-family:'Calibri'; color:#1E1E1E; text-align:center">
<span style="color:#ED9B33">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender.
<span style="color:#ED9B33">Report if suspicious.</div>
<br>
</span>
<div>
<div style="font-family:Arial,sans-serif; font-size:14px">Use the non-thread safe version:</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><img alt="image.png" class="x_proton-embedded" data-outlook-trace="F:1|T:1" src="cid:4c7b957d@arrowgeomatics.com"><br>
</div>
<div class="x_protonmail_signature_block x_protonmail_signature_block-empty" style="font-family:Arial,sans-serif; font-size:14px">
<div class="x_protonmail_signature_block-user x_protonmail_signature_block-empty">
</div>
<div class="x_protonmail_signature_block-proton x_protonmail_signature_block-empty">
</div>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div class="x_protonmail_quote">On Wednesday, 21 October 2026 at 15:39, Dan Nilsson via mapguide-users <mapguide-users@lists.osgeo.org> wrote:<br>
<blockquote class="x_protonmail_quote" type="cite">
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I have this version of MapGuide:</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<img size="89774" class="x_proton-embedded" style="max-width:529px" data-outlook-trace="F:2|T:2" src="cid:8f0c8f85-9233-480c-8098-79f392516d7b"></div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I stop the IIS and MapGuide service</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="text-align:left; text-indent:0px; line-height:1.5rem; margin:0px; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I have downloaded "php-8.3.36-Win32-vs16-x64.zip" (<span style="font-weight:500">VS16 x64 Thread Safe</span></div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
is this correct?)</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Copy all the files to PHP folder in MapGuide and replace existing</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Keeping original php.ini</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Start the IIS and MapGuide service</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Try login.php and get this error:</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
PHP Fatal error:  Uncaught Error: Class "MgRole" not found in C:\Program Files\OSGeo\MapGuide\Web\www\mapadmin\serverdatafunctions.php:439</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Stack trace:</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
#0 C:\Program Files\OSGeo\MapGuide\Web\www\mapadmin\resizableadmin.php(34): require_once()</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
#1 C:\Program Files\OSGeo\MapGuide\Web\www\mapadmin\login.php(22): include('...')</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
#2 {main}</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
  thrown in C:\Program Files\OSGeo\MapGuide\Web\www\mapadmin\serverdatafunctions.php on line 439</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Br, Dan</div>
<div id="x_Signature">
<table cellspacing="0" cellpadding="0" border="0">
<tbody>
<tr>
<td>
<div id="x_x_signature-365-signature" style="margin:0cm">
<div style="margin:0cm 0px; font-family:"Lucida Sans"; font-size:8pt; color:black">
<br>
</div>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<div id="x_appendonsend"></div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Från:</b>
<a href="mailto:gordon.luckett@arrowgeomatics.com" rel="noreferrer nofollow noopener" style="word-break:break-word">
gordon.luckett@arrowgeomatics.com</a> <<a href="mailto:gordon.luckett@arrowgeomatics.com" rel="noreferrer nofollow noopener" style="word-break:break-word">gordon.luckett@arrowgeomatics.com</a>><br>
<b>Skickat:</b> den 21 oktober 2026 21:28<br>
<b>Till:</b> MapGuide Users Mail List <<a href="mailto:mapguide-users@lists.osgeo.org" rel="noreferrer nofollow noopener">mapguide-users@lists.osgeo.org</a>><br>
<b>Kopia:</b> Dan Nilsson <<a href="mailto:Dan.Nilsson@tyrens.se" rel="noreferrer nofollow noopener">Dan.Nilsson@tyrens.se</a>><br>
<b>Ämne:</b> Re: [mapguide-users] Patching PHP Vulnerabilities in MapGuide OS</font>
<div> </div>
</div>
<div>
<div style="background-color:#F1F0EA; width:100%; font-size:12pt; line-height:20pt; font-family:'Calibri'; color:#1E1E1E; text-align:center">
<span style="color:#ED9B33">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender.
<span style="color:#ED9B33">Report if suspicious.</span></div>
<br>
<div>
<div style="font-family:Arial,sans-serif; font-size:14px">Make sure you use the old PHP.INI from 8.3.26 with all the references to MG.</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px">8.3 versions don't jump that much in mapguide -- if you try with MGOS 3 with PHP 8.1, you definitely get that error.</div>
<div class="x_x_protonmail_signature_block x_x_protonmail_signature_block-empty" style="font-family:Arial,sans-serif; font-size:14px">
<div class="x_x_protonmail_signature_block-user x_x_protonmail_signature_block-empty">
</div>
<div class="x_x_protonmail_signature_block-proton x_x_protonmail_signature_block-empty">
</div>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div class="x_x_protonmail_quote">On Wednesday, 21 October 2026 at 15:23, Dan Nilsson via mapguide-users <<a href="mailto:mapguide-users@lists.osgeo.org" rel="noreferrer nofollow noopener">mapguide-users@lists.osgeo.org</a>> wrote:<br>
<blockquote class="x_x_protonmail_quote" type="cite">
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Is the php call working well with 8.3.36?</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
login.php to MapGuide Site Administrator?</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
When I use QuickPlot I get an error.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I get this error:</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<img size="26495" class="x_x_proton-embedded x_proton-embedded" style="max-width:529px" data-outlook-trace="F:3|T:3" src="cid:719abc64-5999-407f-8445-c07c618c4fa5"></div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Have I done anything wrong?</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I have done a php file that print out the version I have installed:</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
8.3.36</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
If I go back to the old PHP I get this:</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
8.3.26</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
And when I use login.php I get MapGuide Site Administrator as expected</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<img id="x_x_image_0" width="194" height="76" size="10250" class="x_x_proton-embedded x_proton-embedded" style="width:194.222px; height:76px; max-width:529px" data-outlook-trace="F:3|T:3" src="cid:af47f03c-5e97-4dc2-bb17-4c8e89d4874e"></div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Br, Dan</div>
<div id="x_x_appendonsend"></div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Från:</b> mapguide-users <<a href="mailto:mapguide-users-bounces@lists.osgeo.org" rel="noreferrer nofollow noopener" style="word-break:break-word">mapguide-users-bounces@lists.osgeo.org</a>>
 för GordonL via mapguide-users <<a href="mailto:mapguide-users@lists.osgeo.org" rel="noreferrer nofollow noopener">mapguide-users@lists.osgeo.org</a>><br>
<b>Skickat:</b> den 21 oktober 2026 20:56<br>
<b>Till:</b> MapGuide Users Mail List <<a href="mailto:mapguide-users@lists.osgeo.org" rel="noreferrer nofollow noopener">mapguide-users@lists.osgeo.org</a>><br>
<b>Kopia:</b> <a href="mailto:gordon.luckett@arrowgeomatics.com" rel="noreferrer nofollow noopener" style="word-break:break-word">
gordon.luckett@arrowgeomatics.com</a> <<a href="mailto:gordon.luckett@arrowgeomatics.com" rel="noreferrer nofollow noopener" style="word-break:break-word">gordon.luckett@arrowgeomatics.com</a>><br>
<b>Ämne:</b> Re: [mapguide-users] Patching PHP Vulnerabilities in MapGuide OS</font>
<div> </div>
</div>
<div>
<div style="background-color:#F1F0EA; width:100%; font-size:12pt; line-height:20pt; font-family:'Calibri'; color:#1E1E1E; text-align:center">
<span style="color:#ED9B33">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender.
<span style="color:#ED9B33">Report if suspicious.</span></div>
<br>
<div>
<div style="font-family:Arial,sans-serif; font-size:14px">I just tested 8.3.36 without issue (so far).</div>
<div style="font-family:Arial,sans-serif; font-size:14px">(just overwrite in place)</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div class="x_x_x_protonmail_signature_block x_x_x_protonmail_signature_block-empty" style="font-family:Arial,sans-serif; font-size:14px">
<div class="x_x_x_protonmail_signature_block-user x_x_x_protonmail_signature_block-empty">
</div>
<div class="x_x_x_protonmail_signature_block-proton x_x_x_protonmail_signature_block-empty">
</div>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://www.php.net/downloads.php?os=windows&osvariant=windows-downloads&version=8.3" originalsrc="https://www.php.net/downloads.php?os=windows&osvariant=windows-downloads&version=8.3" style="word-break:break-word">https://www.php.net/downloads.php?os=windows&osvariant=windows-downloads&version=8.3</a></span><br>
</div>
<div style="font-family:Arial,sans-serif; font-size:14px"><br>
</div>
<div class="x_x_x_protonmail_quote">On Wednesday, 21 October 2026 at 14:53, Kyle Parker via mapguide-users <<a href="mailto:mapguide-users@lists.osgeo.org" rel="noreferrer nofollow noopener">mapguide-users@lists.osgeo.org</a>> wrote:<br>
<blockquote class="x_x_x_protonmail_quote" type="cite">
<div class="x_x_x_GroupWiseMessageBody" id="x_x_x_GroupWiseSection_1792607864000_KParker@aesi-consulting.com_F7A59F5002B60000BE671F001F009300_">
<div>Good afternoon,</div>
<div><br>
</div>
<div>Is patching the PHP version bundled with MapGuide possible? There has been a new update from php.net to address certain security vulnerabilities with PHP</div>
<div><br>
</div>
<div>CVE-2026-109618 & CVE-2026-109619</div>
<div><br>
</div>
<div>My team is currently running Mapguide 4.0.0.10202, and PHP Version 8.3.26. Would updating PHP to 8.3.35 be possible without issue or would it cause problems with mapguide? Thank you.
<br>
</div>
<br>
<span style="font-size:10pt; display:inline-block">
<p><font face="Arial" size="2">Confidentiality Notice: The information contained in this message and any attachments may contain confidential or proprietary material and is intended solely for the use of the person or entity to which it is addressed. Any unauthorized
 review, use, disclosure or distribution of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of this communication and any attachments.</font>
</p>
</span></div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</body>
</html>