phpmyadmin · MauricioFauth · Nov 11, 2025 · Nov 11, 2025 · Nov 11, 2025
diff --git a/libraries/classes/Plugins/TwoFactor/Application.php b/libraries/classes/Plugins/TwoFactor/Application.php
@@ -16,6 +16,10 @@
 
 use function __;
 use function extension_loaded;
+use function restore_error_handler;
+use function set_error_handler;
+
+use const E_DEPRECATED;
 
 /**
  * HOTP and TOTP based two-factor authentication
@@ -89,11 +93,20 @@ public function render()
     public function setup()
     {
         $secret = $this->twofactor->config['settings']['secret'];
-        $inlineUrl = $this->google2fa->getQRCodeInline(
-            'phpMyAdmin (' . $this->getAppId(false) . ')',
-            $this->twofactor->user,
-            $secret
-        );
+
+        // Suppress PHP 8.4 deprecation from third-party package
+        set_error_handler(static function (int $level): bool {
+            return $level === E_DEPRECATED;
+        });
+        try {
+            $inlineUrl = $this->google2fa->getQRCodeInline(
+                'phpMyAdmin (' . $this->getAppId(false) . ')',
+                $this->twofactor->user,
+                $secret
+            );
+        } finally {
+            restore_error_handler();
+        }
 
         return $this->template->render('login/twofactor/application_configure', [
             'image' => $inlineUrl,

diff --git a/libraries/classes/Util.php b/libraries/classes/Util.php
@@ -65,8 +65,10 @@
 use function random_bytes;
 use function range;
 use function reset;
+use function restore_error_handler;
 use function round;
 use function rtrim;
+use function set_error_handler;
 use function set_time_limit;
 use function sort;
 use function sprintf;
@@ -85,6 +87,7 @@
 use function trim;
 use function uksort;
 
+use const E_DEPRECATED;
 use const ENT_COMPAT;
 use const ENT_QUOTES;
 use const PHP_INT_SIZE;
@@ -716,14 +719,12 @@ public static function localisedDate($timestamp = -1, $format = '')
 
         $date = (string) preg_replace(
             '@%[aA]@',
-            // phpcs:ignore Generic.PHP.DeprecatedFunctions.Deprecated
-            $dayOfWeek[(int) @strftime('%w', (int) $timestamp)],
+            $dayOfWeek[(int) self::strftime('%w', (int) $timestamp)],
             $format
         );
         $date = (string) preg_replace(
             '@%[bB]@',
-            // phpcs:ignore Generic.PHP.DeprecatedFunctions.Deprecated
-            $month[(int) @strftime('%m', (int) $timestamp) - 1],
+            $month[(int) self::strftime('%m', (int) $timestamp) - 1],
             $date
         );
 
@@ -739,8 +740,7 @@ public static function localisedDate($timestamp = -1, $format = '')
 
         // Can return false on windows for Japanese language
         // See https://github.com/phpmyadmin/phpmyadmin/issues/15830
-        // phpcs:ignore Generic.PHP.DeprecatedFunctions.Deprecated
-        $ret = @strftime($date, (int) $timestamp);
+        $ret = self::strftime($date, (int) $timestamp);
         // Some OSes such as Win8.1 Traditional Chinese version did not produce UTF-8
         // output here. See https://github.com/phpmyadmin/phpmyadmin/issues/10598
         if ($ret === false || mb_detect_encoding($ret, 'UTF-8', true) !== 'UTF-8') {
@@ -750,6 +750,20 @@ public static function localisedDate($timestamp = -1, $format = '')
         return $ret;
     }
 
+    /** @return string|false */
+    private static function strftime(string $format, ?int $timestamp = null)
+    {
+        set_error_handler(static function (int $level): bool {
+            return $level === E_DEPRECATED;
+        });
+        try {
+            // phpcs:ignore Generic.PHP.DeprecatedFunctions.Deprecated
+            return $timestamp === null ? strftime($format) : strftime($format, $timestamp);
+        } finally {
+            restore_error_handler();
+        }
+    }
+
     /**
      * Splits a URL string by parameter
      *
@@ -1710,8 +1724,7 @@ public static function expandUserString(
         }
 
         /* Do the replacement */
-        // phpcs:ignore Generic.PHP.DeprecatedFunctions.Deprecated
-        return strtr((string) @strftime($string), $replace);
+        return strtr((string) self::strftime($string), $replace);
     }
 
     /**

diff --git a/libraries/classes/WebAuthn/WebauthnLibServer.php b/libraries/classes/WebAuthn/WebauthnLibServer.php
@@ -21,9 +21,12 @@
 use function array_map;
 use function base64_encode;
 use function json_decode;
+use function restore_error_handler;
+use function set_error_handler;
 use function sodium_base642bin;
 use function sodium_bin2base64;
 
+use const E_DEPRECATED;
 use const SODIUM_BASE64_VARIANT_ORIGINAL;
 use const SODIUM_BASE64_VARIANT_URLSAFE_NO_PADDING;
 
@@ -142,12 +145,21 @@ public function parseAndValidateAssertionResponse(
             'timeout' => 60000,
         ]);
         Assert::isInstanceOf($requestOptions, PublicKeyCredentialRequestOptions::class);
-        $server->loadAndCheckAssertionResponse(
-            $assertionResponseJson,
-            $requestOptions,
-            $userEntity,
-            $request
-        );
+
+        // Suppress PHP 8.1 deprecation from third-party package
+        set_error_handler(static function (int $level): bool {
+            return $level === E_DEPRECATED;
+        });
+        try {
+            $server->loadAndCheckAssertionResponse(
+                $assertionResponseJson,
+                $requestOptions,
+                $userEntity,
+                $request
+            );
+        } finally {
+            restore_error_handler();
+        }
     }
 
     public function parseAndValidateAttestationResponse(
@@ -191,11 +203,20 @@ public function parseAndValidateAttestationResponse(
         ];
         $credentialCreationOptions = PublicKeyCredentialCreationOptions::createFromArray($creationOptionsArray);
         Assert::isInstanceOf($credentialCreationOptions, PublicKeyCredentialCreationOptions::class);
-        $publicKeyCredentialSource = $server->loadAndCheckAttestationResponse(
-            $attestationResponse,
-            $credentialCreationOptions,
-            $request
-        );
+
+        // Suppress PHP 8.1 deprecation from third-party package
+        set_error_handler(static function (int $level): bool {
+            return $level === E_DEPRECATED;
+        });
+        try {
+            $publicKeyCredentialSource = $server->loadAndCheckAttestationResponse(
+                $attestationResponse,
+                $credentialCreationOptions,
+                $request
+            );
+        } finally {
+            restore_error_handler();
+        }
 
         return $publicKeyCredentialSource->jsonSerialize();
     }