# PHPMailer needs an update

**URL:** <https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352>\
**Category:** Security\
**Created:** [November 14, 2019, 7:53pm UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352 "2019-11-14T19:53:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![radelphe](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/r/dbc845/32.png) [@radelphe](https://ask.gibbonedu.org/u/radelphe)\
**Post date:** [November 14, 2019, 7:53pm UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352/1 "2019-11-14T19:53:46Z")

</div>

While investigating an issue with emails, I noticed that Gibbon is using a deprecated version of PHPMailer (5.2.23 which was deprecated about a year ago. The issue that I investigated was not related to the version of PHPMailer but I thought it is good to bring this here because it may cause some security issues as the newer versions of PHPMailer contain more security fixes.

Adelphe

---

<div class="post-metadata">

**Author:** ![sandra](https://ask.gibbonedu.org/user_avatar/ask.gibbonedu.org/sandra/32/5_2.png) [@sandra](https://ask.gibbonedu.org/u/sandra)\
**Post date:** [November 18, 2019, 9:31am UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352/2 "2019-11-18T09:31:13Z")

</div>

Hi Adelphe,

Well spotted. Would you be interested in checking out the release notes for the current PHPMailer version, compared to Gibbon’s version, and seeing if there’s any breaking changes we should be aware of? Then I think we could look at upgrading the PHPMailer library for v19 and testing it.

Thanks!

---

<div class="post-metadata">

**Author:** ![radelphe](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/r/dbc845/32.png) [@radelphe](https://ask.gibbonedu.org/u/radelphe)\
**Post date:** [November 29, 2019, 3:21am UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352/3 "2019-11-29T03:21:41Z")

</div>

Hi Sandra,

Sorry for the delayed response because I did not get notified of your post. Sure thing, I can do that and I’ll let you know.

Thank you,  
Adelphe

---

<div class="post-metadata">

**Author:** ![radelphe](https://ask.gibbonedu.org/letter_avatar_proxy/v4/letter/r/dbc845/32.png) [@radelphe](https://ask.gibbonedu.org/u/radelphe)\
**Post date:** [December 3, 2019, 3:08pm UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352/4 "2019-12-03T15:08:41Z")

</div>

Hi @ross,

The latest released version of PHPMailer is 6.1.3 (released on November 21st, 2019) while Gibbon’s version is 5.2.23. The current version of PHPMailer (starting with 6.0) is NOT compatible with 5.2. Here are some useful links about PHPMailer 6.0:

[1. Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md#version-60-august-28th-2017)  
[2. Upgrading from PHPMailer 5.2 to 6.0](https://github.com/PHPMailer/PHPMailer/blob/master/UPGRADING.md#upgrading-from-phpmailer-52-to-60)

Hope it helps.  
Adelphe

---

<div class="post-metadata">

**Author:** ![sandra](https://ask.gibbonedu.org/user_avatar/ask.gibbonedu.org/sandra/32/5_2.png) [@sandra](https://ask.gibbonedu.org/u/sandra)\
**Post date:** [December 5, 2019, 6:39am UTC](https://ask.gibbonedu.org/t/phpmailer-needs-an-update/2352/5 "2019-12-05T06:39:58Z")

</div>

Thanks Adelphe for checking into this 😃 We’re late in the development cycle for v19, and the mailer is currently stable, so my thoughts are to keep the current PHPMailer 5.2.23 version for v19, and plan to upgrade to PHPMailer 6.1.3+ early in the v20 development cycle, that way we’ll have plenty of time to test and handle the breaking changes.

I’ve made a note on the roadmap: [https://github.com/GibbonEdu/core/projects/4](https://github.com/GibbonEdu/core/projects/4)