Packagist · #4027 most downloaded on Packagist

pear/http_request2

v2.8.04.4M downloads/mopear/HTTP_Request2 ↗New releases in your daily digest, changelog included.

Provides an easy way to perform HTTP requests.

Last release 1 months ago
04 Sep 2026
Release timing varies
gaps range from 2 months to 4.4 years
Nearly every release is documented
notes for 10 of 11 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
11 releases · first in 2014

Release timeline

11 releases since 2014

2014201620182020

Releases

v2.8.04 Sept 2026Deprecated
Tested on PHP 8.5 and 8.6, runs without E_DEPRECATED messages
Tested on PHP 8.5 and 8.6, runs without E_DEPRECATED messages

Updated Public Suffix List

Updated cipher bundle used by Socket adapter to current "Intermediate compatibility"
Open source →
Additional notes2 sources agree
Tested on PHP 8.5 and 8.6, runs without E_DEPRECATED messages:

Explicit nullable types used (implicit ones deprecated in PHP 8.4)

curl_close() omitted in PHP 8 (deprecated in PHP 8.5, no-op since 8.0)

Minimum required PHP version is 7.1 (needed for nullable types)

PHPUnit-Polyfills upgraded to the current version. Deprecation checks from newer PHPUnit are now enabled in GitHub CI for highest PHP versions

Updated Public Suffix List

Updated cipher bundle used by Socket adapter to current "Intermediate compatibility"
Open source →
v2.7.06 Apr 2025

Tested on PHP 8.4, psalm 6 used for static analysis;
Prevent XSS if PHP files backing networked tests (those in tests/_network directory) are served from a publicly available website.

Open source →

Additional notes2 sources agree

Added

Tested on PHP 8.4;
Psalm 6 used for static analysis;
Updated Public Suffix List.

Fixed

Prevent XSS when PHP files backing server-side tests are served from a publicly available website, thanks to Peter Potrowl (peter017 at gmail dot com) for the report.
data/generate-list.php will only run with a command-line SAPI.
Better random value used for cnonce parameter in Digest authentication, see [issue #30]. Digest authentication should be considered deprecated, however.
psalm.xml configuration file is no longer installed by composer.

Open source →

v2.6.01 Nov 2023

Use psalm for static analysis, several minor issues fixed

Use psalm for static analysis, several minor issues fixed
Correctly parse HTTP status line with an empty reason-phrase (see #26)
Updated Public Suffix List

Open source →

Additional notes2 sources agree

Tested on PHP 8.2 and 8.3
Use [psalm] for static analysis, several minor issues fixed
Correctly parse HTTP status line with an empty reason-phrase (see [pull request #26])
Updated Public Suffix List

Open source →

v2.5.012 Jul 20212 sources agree

Socket adapter will now retry writing to socket rather than throw an exception if fwrite() call returns zero written bytes ([issue #23])

Fixed

Socket adapter will now retry writing to socket rather than throw an exception if fwrite() call returns zero written bytes ([issue #23])

Changed

Socket adapter will use only TLS 1.2 and TLS 1.3 (the latter is available on PHP 7.4+)
Upgraded tests for PHPUnit 9 compatibility, [PHPUnit Polyfills package] is used to run them on PHP 5.6 to PHP 8
Test suite now runs on Github Actions rather than on Travis
Updated Public Suffix List

Open source →

v2.4.224 Sept 2020

Fix Socket adapter prematurely stopping receiving the response body

Open source →

Additional notes2 sources agree

Fixed

Socket adapter could prematurely end receiving the response body due to fread() call returning an empty string

Open source →

v2.4.11 Aug 20202 sources agree

Switch socket to blocking mode when enabling crypto, this fixes HTTPS requests through proxy with Socket adapter ([issue #20])

Fixed

Switch socket to blocking mode when enabling crypto, this fixes HTTPS requests through proxy with Socket adapter ([issue #20])
Add .gitattributes file to omit installing tests ([issue #19])

Open source →

v2.4.026 Jul 2020Deprecated2 sources agree

Removed support for magic_quotes_runtime, as get_magic_quotes_runtime() was deprecated in PHP 7.4 and the functionality itself was disabled since PHP…

Minimum required version is now PHP 5.6, as using older versions for HTTPS requests may be insecure
Removed support for magic_quotes_runtime, as get_magic_quotes_runtime() was deprecated in PHP 7.4 and the functionality itself was disabled since PHP 5.4 (PEAR bug #23839)
Socket adapter now uses socket in non-blocking mode, as some configurations could have problems with timeouts in HTTPS requests (PEAR bug #21229)
Fixed bogus size check error with gzipped responses larger than 4 GiB uncompressed (PEAR bug #21239)
Use current "Intermediate compatibility" cipher list
Updated Public Suffix List

The package is now 100% autoload-compatible, when installed with composer it no longer uses include-path and does not contain require_once statements

Open source →