Search that finds answers
Full-text search across all languages, popular-search reports and optional Elasticsearch or OpenSearch backends.
phpMyFAQ 4.1
Security notice (October 21, 2026): Read the details →
A mobile-friendly, feature-rich, AI-ready open source FAQ web app for PHP 8.3+. Free since 2001.
Latest release: 4.1.11 (October 21, 2026) · Try 4.2.0-beta.3
See it in action
Everything a knowledge base needs
Multilingual by design
40+ interface languages, per-FAQ translations, right-to-left layouts and machine translation.
Permissions and single sign-on
Users, groups and per-category rights. LDAP, Active Directory, Entra ID, OAuth 2.0, passkeys and two-factor authentication.
Editing without friction
WYSIWYG editor, categories, attachments, glossary, comments, revisions and an editorial workflow.
Built to integrate
REST API, an MCP server for AI clients, plugins, web push notifications and SBOMs for every release.
Runs on your stack
PHP 8.3+, MySQL, MariaDB, PostgreSQL, SQLite or SQL Server. Deploy on a web server, Docker or Kubernetes.
Latest News
The phpMyFAQ Team would like to announce the availability of phpMyFAQ 4.1.11 and phpMyFAQ 4.2.0-beta.3, the "RJ Mitte" releases. phpMyFAQ 4.2.0-beta.3 adds support for generic OpenID Connect providers, and a "Force layout mode" setting. Both releases fix security vulnerabilities, update all third party dependencies, and fix all reported bugs.
Security notice: A critical pre-authentication remote code execution vulnerability in PHP's CGI SAPI (CVE-2026-109618, CVSS v4.0 9.2) affects all phpMyFAQ installations running on PHP-CGI.
The flaw is in PHP itself, not in phpMyFAQ, and is exploitable when cgi.fix_pathinfo=1 is set, which is the PHP default.
A successful attack gives an unauthenticated attacker full control over the server, including the FAQ database and admin access.
The PHP project releases fixed versions today at 14:00 UTC: PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
Please update PHP as soon as the patches are available.
Until then, set cgi.fix_pathinfo=0 in your php.ini as an interim mitigation.
The phpMyFAQ Team is pleased to announce phpMyFAQ 4.1.10 and phpMyFAQ 4.2.0-beta.2, the "Tim Curry" releases. Both releases fix security vulnerabilities, update all third party dependencies, and fix all reported bugs.
What's next: phpMyFAQ 4.2
- Machine translation with DeepL, Google Cloud Translation, Azure Translator, Amazon Translate and LibreTranslate
- Editorial workflow with per-language draft, review and published states, plus separate read, write and publish permissions
- Custom pages with WYSIWYG editing, SEO features and multi-language support
- Theme manager with multiple, switchable themes
- Official Docker images, a health endpoint and FAQ update notifications
- Web push notifications and a simple chat for users
- Storage on Amazon S3 and mail delivery via SendGrid, AWS SES and Mailgun
- Experimental Keycloak support and API key authentication via OAuth2
phpMyFAQ works perfectly with the best web hosting.
phpMyFAQ runs effectively even on cheap web hosting.
Sponsored by
Find the best online casinos, Kasinohai in Finnish, on Kasinohai
Find the best Zimpler casinos, Zimpler kasinot in Finnish, on KasinoKurko
For the best in-play and cash out betting sites online, visit cashoutbettingsites.co.uk
Für ein optimales Spielerlebnis in Casinos ohne OASIS Sperrdatei sorgt Neuecasinos24 durch die neuesten Casino Vergleiche.