EnglishAnnouncement
- [2026-05-03] Piwigo 16.4.0 : because security matters
- [2026-02-24] Piwigo 16.3.0 : security fixes and docker update
- [2025-12-30] Piwigo 16.2.0 : customize Standard Pages
- [2025-12-02] Piwigo 16.1.0 : better compatibility with old/new PHP versions
- [2025-11-24] Piwigo 16 : Standard pages, API keys, Docker image
#16 2026-06-02 16:31:27
- maniac
- Guest
Re: Piwigo 16.4.0 : because security matters
Thank you for this great app in 1st place!
I have noticed that with latest 16.4.0 version Piwigo is intermittently freezing (http 504) , sometimes only admin.php / identification.php , sometimes even gallery does not load at all.
After few hours of troubleshooting i found the reason - Piwigo is now connecting to https://piwigo.org and when it's blocked by firewall, everything get stuck up to timeout.
Can the behaviour be changed in a way to not affect Piwigo functionality when piwigo.org is not reachable?
Thanks a lot!
#18 2026-06-02 17:49:14
- maniac
- Guest
Re: Piwigo 16.4.0 : because security matters
@plg sure, i have opened issue on github, thank again! [Github] Piwigo issue #2563
#19 2026-07-01 14:17:31
- nlb
- Member
- 2021-01-28
- 3
Re: Piwigo 16.4.0 : because security matters
Hello,
Same error there since i switch to php 8.5.
Edit : solution :-)
the issue line :
if ( ord($fname_wo_ext)>ord('9') or !preg_match('/^\d+(-|$)/', $fname_wo_ext) )
The correction
if ( ord($fname_wo_ext[0])>ord('9') or !preg_match('/^\d+(-|$)/', $fname_wo_ext) )
Nicolas
EtienneG wrote:
thanks, I appreciate your concerns about security and the good maintenance of piwigo!!
after upgrading to 16.4 switching to PHP 8.5 i get the following error:Deprecated: ord(): Providing a string that is not one byte long is deprecated. Use ord($str[0]) instead in /home/p-t6mte9/html/etienne-piwigo-fu381/include/functions_url.inc.php on line 262
after changing it to the suggested fix "Use ord($str[0])" everything seems to be fine again.
anybody else?
best,
etienne
Last edited by nlb (2026-07-01 14:55:28)
Offline