Hamster Server 1.4.1

Hamster Server 1.4.1 is a security update: every bundled PHP build now carries the fixes for PHP2Shell (CVE-2026-109618 and CVE-2026-109619, unauthenticated remote code execution). It also brings the new logo.

Security: PHP2Shell

Branch	1.4.0 shipped	1.4.1 ships
PHP 8.2	8.2.33	8.2.35-1
PHP 8.3	8.3.33	8.3.36-1
PHP 8.4	8.4.24	8.4.27-1
PHP 8.5	8.5.9	8.5.12-1

The fixes landed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12; the -1 builds are windows.php.net's rebuilds of those releases. Every archive was downloaded from the official catalog and matches its published SHA-256 (see THIRD_PARTY_RUNTIMES.md).

Already on 1.4.0? With automatic updates on (the default), Hamster Server has probably moved your active PHP branch to the patched build already. Check the version shown in the main window. Runtimes you installed yourself on other branches are only updated from the PHP Version Manager, so open it and update any that are below the versions above. Installing 1.4.1 replaces all four bundled builds.

Fixes

• Two installations of the same PHP build can run side by side. Windows OPcache shared one memory segment between every process of the same PHP build, so a second Hamster Server folder running that build made php-cgi exit with "Opcode handlers are unusable due to ASLR". Each runtime folder now gets its own segment (opcache.cache_id); generated php.ini files are updated automatically.

New logo

• The new "Hamster Stack" logo is used for the program, the tray, the taskbar and the About box. The icon includes simplified 16–24 px versions.
• On a dark taskbar, the tray and taskbar icons switch to the light-on-dark variant so the server stack stays visible, and they follow a change of Windows theme.
• The tray and taskbar status icons are drawn at every size Windows asks for, so they stay sharp at 125–200 % display scaling.
• The PHP benchmark dashboard in www\ has a favicon and is renamed from "XServer Performance Lab".

Download and install

1. Download HamsterServer-1.4.1-win-x64.zip below.
2. Make sure the .NET 10 Desktop Runtime (x64) is installed.
3. Extract the zip to a folder you can write to (for example D:\HamsterServer) and run HamsterServer.exe.
4. Choose Start All and open http://localhost/.

Upgrading from 1.4.0 or 1.3

Close the old Hamster Server first. Then, in the new folder:

• copy config\hamster-server.json from the old folder to keep your settings and virtual hosts;
• copy any PHP runtime folders you installed yourself from the old php\ folder (only patched ones are worth keeping);
• copy your sites from the old www\ folder if you kept them there.

If your settings name a PHP version that is not in the new folder (for example 8.5.9), Hamster Server picks the newest build of the same branch on start.

Bundled runtimes

Apache 2.4.68 (VS18 Win64), PHP 8.2.35-1, 8.3.36-1, 8.4.27-1 and 8.5.12-1 (NTS x64).

Checksum

236e94244d59403549d2bff129601775b48a20b11eb3b9aa8dbdf04d362dcc94  HamsterServer-1.4.1-win-x64.zip

The same value is attached as HamsterServer-1.4.1-win-x64.zip.sha256. To check it in PowerShell: Get-FileHash .\HamsterServer-1.4.1-win-x64.zip -Algorithm SHA256.

Website: https://hamsterserver.konexforge.com/ · Tiếng Việt

Hamster Server 1.4.0

Hamster Server 1.4.0 keeps PHP up to date on its own, shows which program holds a port, and makes the PHP, Ports and Virtual Hosts windows clearer.

What's new

Automatic PHP updates

• Hamster Server checks php.net a minute after it starts and every six hours. In the default Install automatically mode it installs the newer patch of the PHP branch you use (for example 8.5.9 → 8.5.12-1) next to the current one, then switches to it once no request is running. Notify me only and Off are available in the PHP Version Manager.
• Your extensions come along. DLLs you added to a runtime's ext\ folder (sqlsrv, pdo_sqlsrv, xdebug, imagick…) are copied into the new patch of the same branch. Files the new patch already ships are not overwritten.
• php.net's Windows rebuild versions (8.5.12-1) are now recognised. Before this release they were ignored, so no update was ever found.
• Redesigned PHP Version Manager: shows the active runtime and whether it is current, with a one-click update. Each runtime lists its missing extensions, and the window adds Use this version, Copy extensions and Remove old patches.

Ports

• New System ports tab: every TCP port listening on the computer, with the program and PID behind it. Hamster Server's own ports are green; a program blocking a port Hamster Server needs is red.
• The Apache ports tab says for each port whether it is free, in use by Hamster Server, or taken by another program.

Virtual Hosts

• Enable/disable a site, open it in the browser, or open its folder, from the toolbar or the right-click menu.
• Checks each name against the Windows hosts file. A site whose name does not point at 127.0.0.1 is shown in amber, with the exact line to add.

PHP and Apache settings

• PHP Configuration is now the one place for php.ini settings and extensions, and its changes stick. Previously, extension changes could silently revert after the next settings save or version switch.
• Custom Apache directives are checked with httpd -t before saving, so a typo cannot leave Apache stopped.
• New settings: upload and POST size, short open tags, error-reporting level.

Interface

• A new SVG icon set drawn at your display's scaling, no longer depending on the installed icon fonts.
• Icons on every action, including the tray menu and right-click menus. Apache has its own colour.

Download and install

1. Download HamsterServer-1.4.0-win-x64.zip below.
2. Make sure the .NET 10 Desktop Runtime (x64) is installed.
3. Extract the zip to a folder you can write to (for example D:\HamsterServer) and run HamsterServer.exe.
4. Choose Start All and open http://localhost/.

The folder is portable: settings, logs, generated configuration and PHP runtimes all stay inside it.

Upgrading from 1.3

Close the old Hamster Server first. Then, in the new folder:

• copy config\hamster-server.json from the old folder to keep your settings and virtual hosts;
• copy any PHP runtime folders you installed yourself from the old php\ folder;
• copy your sites from the old www\ folder if you kept them there.

Bundled runtimes

Apache 2.4.68 (VS18 Win64), PHP 8.2.33, 8.3.33, 8.4.24 and 8.5.9 (NTS x64). With automatic updates on, the active PHP branch moves to its newest patch after the first start.

Checksum

f353fc875b82b3c268ef79bc661ae94b0374536b8edf00bfb029e07682a5f30d  HamsterServer-1.4.0-win-x64.zip

The same value is attached as HamsterServer-1.4.0-win-x64.zip.sha256. To check it in PowerShell: Get-FileHash .\HamsterServer-1.4.0-win-x64.zip -Algorithm SHA256.

Full changelog: #3