PHP 8 is mandatory due to security issues in PHP 7.

I would expect that PHP 7.3 and 7.4 do still get security fixes.
https://www.php.net/supported-versions.php

Hi @atrol

After discussion with my security officer, I downgrade PHP version from 8.0.4 to 7.4.20 and issue is solved.

It can be set in a lower priority.

Always the same issue with security guys... ;-)

Do you have arguments to use last 7 version in place of 8 ?

What about

• MantisBT has a known bug with PHP 8.0.7 version so we can't use that until it gets fixed, and
• PHP 7.4 is fully supported and get sall security updates as per the link provided earlier

@atrol as you have confirmed the issue, I assume you were able to replicate it (I didn't try myself), can you provide steps to reproduce ? Or or @fxm details information about your Environment and Test case custom fields definition.

IIRC I found the same issue some weeks ago using PHP 8.0.3 on a Windows XAMPP environment.
Creating a custom field (any type) and trying to filter by the field should be enough to reproduce the issue.

OK I can reproduce it. So the AJAX fails in return_dynamic_filters.php at line 91:

$t_content = @call_user_func_array( 'filter_form_get_input', array( $t_filter, $filter_target, true ) );

filter_form_get_input() call fails (i.e. function throws ERROR_FILTER_NOT_FOUND error, but due to change in @ operator behavior in which no longer silences fatal errors on PHP 8 [1], the error is not caught as it was on earlier versions.

PR https://github.com/mantisbt/mantisbt/pull/1757