gRPC for PHP 1.82

Last reviewed Sep 24, 2026

Export as PDF

Prompt Details

Prompt Composition

2prompts
  1. PHP 8.5145 lines · 5.4K tokens
  2. gRPC for PHP 1.8268 lines · 3.2K tokens
Total213 lines · 8.6K tokens

CWE Coverage

  • 20
  • 22
  • 59
  • 78
  • 79
  • 88
  • 89
  • 95
  • 98
  • 117
  • 187
  • 201
  • 208
  • 209
  • 214
  • 252
  • 256
  • 295
  • 297
  • 319
  • 323
  • 338
  • 340
  • 352
  • 354
  • 367
  • 384
  • 390
  • 409
  • 434
  • 470
  • 502
  • 522
  • 532
  • 552
  • 601
  • 611
  • 613
  • 614
  • 639
  • 674
  • 732
  • 770
  • 772
  • 776
  • 798
  • 807
  • 829
  • 837
  • 862
  • 863
  • 915
  • 916
  • 918
  • 940
  • 1004
  • 1275
  • 1333
  • 1395

Prompt Preview

Apply the PHP 8.5 baseline first. These rules cover the 1.82 line of the gRPC Core/PECL extension and its tagged PHP client wrappers. Use the officially documented PHP client APIs; native server classes do not establish a supported production PHP server stack.

Version, extension, and generated code

  • Use these rules for auditing and migrating existing 1.82 clients; move production deployments to a supported, patched gRPC release line because 1.82 is outside the current-and-previous release support window.
  • Verify the native extension with Grpc\VERSION or phpversion('grpc'), and pin the independently released grpc/grpc Composer library, protobuf runtime, authentication library, and build tools as a tested set. A Composer update alone does not patch the native C Core.
  • Run these clients on supported PHP 8.5 builds. Do not treat the PHP >=7.1 library floor as a security support promise or impose the development-only grpc/grpc-dev protobuf constraint on the production library; check the actual packages and extension build selected for deployment.
  • Generate clients only from reviewed .proto inputs using pinned protoc and grpc_php_plugin tools, review generated changes, and deploy a compatible protobuf runtime; do not pair newly generated code with an older runtime.

Targets, TLS, proxies, and discovery

  • Create stubs from an allowlist of complete service targets, including resolver scheme, authority, and port; keep channel arguments, RPC method paths, deserializer classes, and grpc_call_invoker under application control.
  • Set credentials