AzureFeeds

Version 5.13.3 of the Microsoft Drivers for PHP for SQL Server is now available on PIE, the PHP Installer for Extensions, the official replacement for the deprecated PECL installer. You can now install SQLSRV and PDO_SQLSRV on Linux, macOS, and Windows through the same Composer-style tooling you already use for your PHP dependencies.

This release completes the PIE rollout that started in 5.13.2. That release also carried two PDO_SQLSRV security fixes, so we recommend upgrading regardless of how you install.

Install with PIE

After installing PIE, install either or both drivers with their Packagist package names:

The drivers require PHP 8.3 or later and the Microsoft ODBC Driver 17 or 18 for SQL Server. PDO_SQLSRV also requires the PDO extension, which is included with PHP by default. PIE itself needs PHP 8.1 or later to run, and it can target any other PHP version you have installed.

On Linux and macOS, PIE builds the extension from source and will offer to install any missing build tools first. On Windows, PIE downloads a prebuilt DLL matching your PHP version, thread-safety mode, and architecture, so no build toolchain is needed.

Windows support arrived in 5.13.3. If you tried pie install on Windows with 5.13.2 and hit This extension does not support the “windows” operating system family, upgrading resolves it.

PECL still works

You don’t have to switch today. Version 5.13.3 is published to PECL as usual, alongside the downloadable release archives, so pecl install sqlsrv and pecl install pdo_sqlsrv continue to work. PIE is where we recommend new installations start.

Security updates

Version 5.13.2 included two PDO_SQLSRV security fixes, both carried forward in 5.13.3:

• PDO::lastInsertId($name) now uses a parameterized query when looking up a sequence name. This prevents the supplied name from changing the query and also fixes lookups for sequence names containing non-ASCII characters.


• Binary parameters containing embedded NUL (0x00) bytes are no longer silently truncated when PDO emulated prepares are used with PDO::SQLSRV_ENCODING_BINARY.

If your application uses PDO_SQLSRV and you are on 5.13.1 or earlier, upgrade.

Additional fixes

5.13.2 also:

• Fixes a Windows thread-safe shared-build linker failure.


• Clears stale unixODBC INI cache data when the module shuts down on Linux and macOS.


• Fixes an AddressSanitizer One Definition Rule violation when SQLSRV and PDO_SQLSRV are loaded together.


• Addresses CodeQL static-analysis findings.

Get version 5.13.3

• Install SQLSRV from Packagist with PIE.


• Install PDO_SQLSRV from Packagist with PIE.


• Download the 5.13.3 release packages.


• Review the full changelog.


• Read the Microsoft Drivers for PHP for SQL Server documentation.

Please report issues and share feedback in the msphpsql GitHub repository.