Inventory plugin disabled by "Unknown user"

[lwpintos]

Code of Conduct

• I agree to follow this project's Code of Conduct

Is there an existing issue for this?

• I have searched the existing issues

GLPI Version

11.0.1

Plugin version

1.6.0

Bug description

The GLPI Inventory plugin was automatically disabled.
In the GLPI logs, the action appears as performed by "Unknown user".

We did not manually disable the plugin.

Relevant log output

Page URL

No response

Steps To reproduce

Currently unknown.
The plugin was working normally and suddenly appeared disabled.

Your GLPI setup information

No response

Anything else?

No response

[stonebuzz]

Hi @lwpintos,

Have you noticed any errors in the GLPI log file?

[vatraxious]

Same issue here. I re-enabled it and after 1-2 days, it's disabled again.

Only relevant entries in php-errors.log

`
glpi.WARNING: *** Warning: Undefined array key "path" at setup.php line 93
Backtrace :
./marketplace/glpiinventory/setup.php:93
./src/Plugin.php:475 plugin_init_glpiinventory()
./src/Plugin.php:428 Plugin::load()
...tener/PostBootListener/InitializePlugins.php:75 Plugin->init()
...ymfony/event-dispatcher/EventDispatcher.php:260 Glpi\Kernel\Listener\PostBootListener\InitializePlugins->onPostBoot()
...ymfony/event-dispatcher/EventDispatcher.php:220 Symfony\Component\EventDispatcher\EventDispatcher::Symfony\Component\EventDispatcher{closure}()
...symfony/event-dispatcher/EventDispatcher.php:56 Symfony\Component\EventDispatcher\EventDispatcher->callListeners()
./src/Glpi/Kernel/Kernel.php:149 Symfony\Component\EventDispatcher\EventDispatcher->dispatch()
./vendor/symfony/http-kernel/Kernel.php:192 Glpi\Kernel\Kernel->boot()
./public/index.php:71 Symfony\Component\HttpKernel\Kernel->handle()

glpi.ERROR: *** Error while loading plugin glpiinventory: str_contains(): Argument #1 ($haystack) must be of type string, null given
Backtrace :
./marketplace/glpiinventory/setup.php:244
./marketplace/glpiinventory/setup.php:244 str_contains()
./src/Plugin.php:475 plugin_init_glpiinventory()
./src/Plugin.php:428 Plugin::load()
...tener/PostBootListener/InitializePlugins.php:75 Plugin->init()
...ymfony/event-dispatcher/EventDispatcher.php:260 Glpi\Kernel\Listener\PostBootListener\InitializePlugins->onPostBoot()
...ymfony/event-dispatcher/EventDispatcher.php:220 Symfony\Component\EventDispatcher\EventDispatcher::Symfony\Component\EventDispatcher{closure}()
...symfony/event-dispatcher/EventDispatcher.php:56 Symfony\Component\EventDispatcher\EventDispatcher->callListeners()
./src/Glpi/Kernel/Kernel.php:149 Symfony\Component\EventDispatcher\EventDispatcher->dispatch()
./vendor/symfony/http-kernel/Kernel.php:192 Glpi\Kernel\Kernel->boot()
./public/index.php:71 Symfony\Component\HttpKernel\Kernel->handle()
`

[RobertoMarcelino]

We are facing the same problem with GLPI Inventory being automatically disabled.

Environment
GLPI version: 11.0.5
GLPI Inventory plugin version: 1.6.6
PHP error:

[2026-02-21 18:47:25] glpi.ERROR:   *** Error while loading plugin glpiinventory: str_contains(): Argument #1 ($haystack) must be of type string, null given
  Backtrace :
  /var/lib/glpi/plugins/glpiinventory/setup.php:244
  /var/lib/glpi/plugins/glpiinventory/setup.php:244  str_contains()
  ./src/Plugin.php:475                               plugin_init_glpiinventory()
  ./src/Plugin.php:428                               Plugin::load()
  ...tener/PostBootListener/InitializePlugins.php:75 Plugin->init()
  ...ymfony/event-dispatcher/EventDispatcher.php:260 Glpi\Kernel\Listener\PostBootListener\InitializePlugins->onPostBoot()
  ...ymfony/event-dispatcher/EventDispatcher.php:220 Symfony\Component\EventDispatcher\EventDispatcher::Symfony\Component\EventDispatcher\{closure}()
  ...symfony/event-dispatcher/EventDispatcher.php:56 Symfony\Component\EventDispatcher\EventDispatcher->callListeners()
  ./src/Glpi/Kernel/Kernel.php:149                   Symfony\Component\EventDispatcher\EventDispatcher->dispatch()
  ./vendor/symfony/http-kernel/Kernel.php:192        Glpi\Kernel\Kernel->boot()
  ./public/index.php:71                              Symfony\Component\HttpKernel\Kernel->handle()

Root cause
In plugins/glpiinventory/setup.php, around line 244, the plugin still uses $CFG_GLPI['root_doc']:

$PLUGIN_HOOKS[Hooks::ADD_JAVASCRIPT]['glpiinventory'] = [];
$PLUGIN_HOOKS[Hooks::ADD_CSS]['glpiinventory'] = [];

if (
    str_contains($current_url, $CFG_GLPI['root_doc'] . '/plugins/glpiinventory/')
    || str_ends_with($current_url, "front/printer.form.php")
    || str_ends_with($current_url, "front/computer.form.php")
) {
    $PLUGIN_HOOKS[Hooks::ADD_CSS]['glpiinventory'][] = addPublicFile("css/views", "css");
    $PLUGIN_HOOKS[Hooks::ADD_CSS]['glpiinventory'][] = addPublicFile('css/deploy', 'css');
    $PLUGIN_HOOKS[Hooks::ADD_JAVASCRIPT]['glpiinventory'][] = addPublicFile('lib/d3/d3', 'js');
    ...
}

On GLPI 11.0.5, $CFG_GLPI['root_doc'] is null at plugin initialization time, which causes:

str_contains(): Argument #1 ($haystack) must be of type string, null given

So the plugin fails to load during plugin_init_glpiinventory(), and GLPI then disables it automatically (shown in logs as disabled by “Unknown user”).

Proposed fix / workaround
The main branch of the repository already uses Plugin::getWebDir() instead of $CFG_GLPI['root_doc']. Applying the same change locally fixes the problem.

Patch applied in setup.php:

Before:

if (
    str_contains($current_url, $CFG_GLPI['root_doc'] . '/plugins/glpiinventory/')
    || str_ends_with($current_url, "front/printer.form.php")
    || str_ends_with($current_url, "front/computer.form.php")
) {

After:

if (
    str_contains($current_url, Plugin::getWebDir('glpiinventory', false))
    || str_ends_with($current_url, "front/printer.form.php")
    || str_ends_with($current_url, "front/computer.form.php")
) {

After this change:

• The plugin loads correctly on GLPI 11.0.5;
• The automatic deactivation stops;
• No new str_contains() errors appear in the logs.

This suggests that the fix already present in the main branch needs to be included in the next tagged release (or backported to 1.6.x) to ensure compatibility with GLPI 11.x.

[RobertoMarcelino]

Quick update with an additional finding related to the same root cause.

After fixing the Plugin::getWebDir() part, the plugin was still being disabled automatically. Checking the logs again after a web server restart showed a second problem in setup.php:

[2026-02-22 11:25:57] glpi.WARNING: *** Warning: Undefined array key "path" at setup.php line 93
[2026-02-22 11:25:57] glpi.ERROR:   *** Error while loading plugin glpiinventory: str_contains(): Argument #1 ($haystack) must be of type string, null given

The relevant code is:

$current_url = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'];

During GLPI boot (when plugins are initialized by InitializePlugins), there is no real HTTP request, so $_SERVER['REQUEST_URI'] may be missing or empty. In that case:

• parse_url('') returns an array without the 'path' key
• Accessing ['path'] triggers the warning
• $current_url becomes null, which later causes str_contains($current_url, ...) to fail

This is already fixed in the main branch of the plugin by making the 'path' access safe:

Before:

$current_url = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'];

After:

$current_url = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] ?? '';

Once I applied both changes locally:

1. Line 93:
   ['path'] → ['path'] ?? ''

2. Line 244:
   $CFG_GLPI['root_doc'] . '/plugins/glpiinventory/' → Plugin::getWebDir('glpiinventory', false)

…the plugin:

• Loads correctly on GLPI 11.0.5
• Is no longer automatically disabled (DB shows state = 1)
• No longer generates warnings or errors in the logs related to glpiinventory on boot

So it looks like the current tagged release is missing at least these two fixes that are already present in main.

[RobertoMarcelino]

Another update with a third related issue in setup.php.

After applying the previous fixes, the plugin was still being automatically disabled on GLPI 11.0.5. Checking the logs again after a fresh web server restart, I now see:

[2026-02-22 13:58:11] glpi.WARNING: *** Warning: Undefined array key "path" at setup.php line 79
  Backtrace :
  /var/lib/glpi/plugins/glpiinventory/setup.php:79
  /var/lib/glpi/plugins/glpiinventory/setup.php:254  plugin_glpiinventory_script_endswith()
  ./src/Plugin.php:475                               plugin_init_glpiinventory()
  ./src/Plugin.php:428                               Plugin::load()
  ...tener/PostBootListener/InitializePlugins.php:75 Plugin->init()
  ...ymfony/event-dispatcher/EventDispatcher.php:260 Glpi\Kernel\Listener\PostBootListener\InitializePlugins->onPostBoot()
  ...ymfony/event-dispatcher/EventDispatcher.php:220 Symfony\Component\EventDispatcher\EventDispatcher::Symfony\Component\EventDispatcher\{closure}()
  ...symfony/event-dispatcher/EventDispatcher.php:56 Symfony\Component\EventDispatcher\EventDispatcher->callListeners()
  ./src/Glpi/Kernel/Kernel.php:149                   Symfony\Component\EventDispatcher\EventDispatcher->dispatch()
  ./vendor/symfony/http-kernel/Kernel.php:192        Glpi\Kernel\Kernel->boot()
  ./public/index.php:71                              Symfony\Component\HttpKernel\Kernel->handle()

[2026-02-22 13:58:11] glpi.ERROR: *** Error while loading plugin glpiinventory: str_ends_with(): Argument #1 ($haystack) must be of type string, null given
  Backtrace :
  /var/lib/glpi/plugins/glpiinventory/setup.php:81
  /var/lib/glpi/plugins/glpiinventory/setup.php:81   str_ends_with()
  /var/lib/glpi/plugins/glpiinventory/setup.php:254  plugin_glpiinventory_script_endswith()
  ...

The corresponding code (around line 79) is:

/**
 * @return bool
 */
function plugin_glpiinventory_script_endswith(string $scriptname): bool
{
    // append plugin directory to avoid dumb errors...
    $requested = 'glpiinventory/front/' . $scriptname;
    $current = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'];

    return str_ends_with($current, $requested);
}

The pattern is the same as the earlier issue in plugin_init_glpiinventory():

• During GLPI boot, there may be no real HTTP request
• $_SERVER['REQUEST_URI'] can be missing or empty
• parse_url('') returns an array without the 'path' key
• Accessing ['path'] triggers the warning
• $current becomes null, which then causes str_ends_with($current, ...) to throw a fatal error

In the main branch, this is already handled safely by using a default empty string if 'path' is not present. The fix is the same pattern as before:

Before:

$current = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'];

After:

$current = parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] ?? '';

To summarize, on my side I had to apply three changes in setup.php to make the plugin load and stay enabled on GLPI 11.0.5:

1. In plugin_glpiinventory_script_endswith()
   parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] → parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] ?? ''

2. In plugin_init_glpiinventory()
   parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] → parse_url($_SERVER['REQUEST_URI'] ?? '')['path'] ?? ''

3. In the CSS/JS hook block

str_contains($current_url, $CFG_GLPI['root_doc'] . '/plugins/glpiinventory/') →
str_contains($current_url, Plugin::getWebDir('glpiinventory', false))

After applying all three:

• The warnings about Undefined array key "path" disappeared
• The str_contains() / str_ends_with() fatal errors disappeared
• The plugin is no longer automatically disabled and remains in state = 1 in glpi_plugins
• GLPI Inventory now loads and works correctly on GLPI 11.0.5 in my environment

It looks like the current tagged release is missing all of these safeguards that are already present (or should be) in main, and they are required for compatibility with GLPI 11.x.

[trasher]

@lwpintos, @vatraxious, @RobertoMarcelino please test #916 and give feedback.