PHP Security Patch Issue?

What issue or error are you experiencing?


As I was setting up a new site, I got this message asking for my Mac administrator password. I can’t remember when I set up the other sites whether I had to allow this. And with all the PHP security information around, I thought I’d ask the question. By the way, are you providing a patch for the PHP security issue?


System Details

  • Local Version: Version 10.2.0+7022

  • Operating System (OS) and OS version: 27.0.1 (26A434)


Local Logs

Attach your Local Log

s here (Help Doc - Retrieving Local’s Log)


Security Reminder
Local does a pretty good job of scrubbing private info from the logs and the errors it produces, however there’s always the possibility that something private can come through. Because these are public forums, always review the screenshots you are sharing to make sure there isn’t private info like passwords being displayed.

Thanks for your question, @Eno1. This password prompt is a normal part of Local. The design of the prompt changed in macOS 27, which might be why it looks unfamiliar to you.

Local asks for your password here so it can modify your hosts file, which is what lets you visit the site from your browser at the [sitename].local domain.

By the way, are you providing a patch for the PHP security issue?

Yes! We’re currently building new PHP versions. Local sites are not exposed to the same risk because they do not host public traffic. But we’ll offer new versions for those who want to test with them. We’ll post in this thread when they’re available: