diff --git a/net-mgmt/icingaweb2-module-icingadb/Makefile b/net-mgmt/icingaweb2-module-icingadb/Makefile
index 0262f29fa377..7ad874342b5d 100644
--- a/net-mgmt/icingaweb2-module-icingadb/Makefile
+++ b/net-mgmt/icingaweb2-module-icingadb/Makefile
@@ -1,55 +1,56 @@
 PORTNAME=	icingaweb2-module-icingadb
 DISTVERSIONPREFIX=	v
 DISTVERSION=	1.1.0
 CATEGORIES=	net-mgmt www
 PKGNAMESUFFIX=	${PHP_PKGNAMESUFFIX}
 
 MAINTAINER=	dvl@FreeBSD.org
 COMMENT=	Publish, synchronize, and visualize Icinga data
 WWW=		https://icinga.com/docs/icinga-db-web/latest/doc/01-About/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	icinga-php-library${PHP_PKGNAMESUFFIX}>=0.9:net-mgmt/icinga-php-library@${PHP_FLAVOR} \
 		icinga-php-thirdparty${PHP_PKGNAMESUFFIX}>=0.11.0:net-mgmt/icinga-php-thirdparty@${PHP_FLAVOR} \
 		icingadb>0:net-mgmt/icingadb \
 		icingaweb2${PHP_PKGNAMESUFFIX}>=2.9:net-mgmt/icingaweb2
 
 USES=		php:web,flavors shebangfix
-USE_PHP=	curl dom json xml
+# php json extension is required but it's statically linked in default php
+USE_PHP=	curl dom xml
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	icinga
 GH_PROJECT=	icingadb-web
 
 NO_BUILD=	yes
 NO_ARCH=	yes
 
 #SUB_FILES=	pkg-message
 SUB_LIST=	ETCDIR=${ETCDIR} \
 		EXAMPLESDIR=${EXAMPLESDIR} \
 		WWWDIR=${WWWDIR}
 
 PLIST_SUB=	WWWGRP=${WWWGRP} \
 		WWWOWN=${WWWOWN}
 
 OPTIONS_DEFINE=		MYSQL PGSQL
 OPTIONS_DEFAULT=	MYSQL PGSQL
 
 PDF_DESC=		Export graphs as PDF
 PDF_RUN_DEPENDS=	${PHPBASE}/lib/php/${PHP_EXT_DIR}/imagick.so:graphics/pecl-imagick@${PHP_FLAVOR}
 
 PGSQL_USE=	PHP=pdo_pgsql,pgsql
 MYSQL_USE=	PHP=mysqli,pdo_mysql
 
 WWWDIR?=	${PREFIX}/www/icingaweb2/modules/${PORTNAME:C/^.*-//}
 
 do-install:
 	(cd ${WRKSRC} && ${RM} -r .mailmap changelog.py icingaweb2.spec \
 		bin/license_writer.py packages test)
 	${MKDIR} ${STAGEDIR}${WWWDIR}
 	(cd ${WRKSRC} && \
 		${COPYTREE_SHARE} . ${STAGEDIR}${WWWDIR})
 
 .include <bsd.port.mk>
diff --git a/net-mgmt/librenms/Makefile b/net-mgmt/librenms/Makefile
index 755e453cdcb2..3a57133da13a 100644
--- a/net-mgmt/librenms/Makefile
+++ b/net-mgmt/librenms/Makefile
@@ -1,258 +1,259 @@
 PORTNAME=	librenms
 PORTVERSION=	23.10.0
 PORTREVISION=	2
 PORTEPOCH=	1
 CATEGORIES=	net-mgmt
 MASTER_SITES=	LOCAL/dvl:vendor
 DISTFILES=	${PORTNAME}-vendor-${DISTVERSIONPREFIX}${DISTVERSION}${DISTVERSIONSUFFIX}${EXTRACT_SUFX}:vendor
 
 MAINTAINER=	dvl@FreeBSD.org
 COMMENT=	Autodiscovering PHP/MySQL/SNMP based network monitoring
 WWW=		https://www.librenms.org
 
 LICENSE=	GPLv3
 
 # perhaps we also need python-memcache python-mysqldb
 RUN_DEPENDS+=	${PYTHON_PKGNAMEPREFIX}pymysql>0:databases/py-pymysql@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}python-dotenv>0:www/py-python-dotenv@${PY_FLAVOR} \
 		bash:shells/bash \
 		dot:graphics/graphviz \
 		rrdtool:databases/rrdtool \
 		snmpget:net-mgmt/net-snmp \
 		sudo:security/sudo
 
 USES=		cpe php python shebangfix
 USE_GITHUB=	yes
-USE_PHP=	ctype curl dom fileinfo filter gd hash json ldap mbstring \
-		mysqli openssl pdo pdo_mysql phar posix session simplexml snmp \
+# php hash/json/openssl extension is required but it's statically linked in default php
+USE_PHP=	ctype curl dom fileinfo filter gd ldap mbstring \
+		mysqli pdo pdo_mysql phar posix session simplexml snmp \
 		sockets tokenizer xml xmlwriter zip zlib
 USE_RC_SUBR=	librenms
 
 SHEBANG_FILES=	../${PORTNAME}-vendor-${PORTVERSION}/paragonie/random_compat/build-phar.sh \
 		../${PORTNAME}-vendor-${PORTVERSION}/tecnickcom/tcpdf/tools/tcpdf_addfont.php \
 		../librenms-vendor-${PORTVERSION}/bin/carbon \
 		../librenms-vendor-${PORTVERSION}/bin/doctrine-dbal \
 		../librenms-vendor-${PORTVERSION}/bin/patch-type-declarations \
 		../librenms-vendor-${PORTVERSION}/bin/php-parse \
 		../librenms-vendor-${PORTVERSION}/bin/psysh \
 		../librenms-vendor-${PORTVERSION}/bin/validate-json \
 		../librenms-vendor-${PORTVERSION}/bin/var-dump-server \
 		../librenms-vendor-${PORTVERSION}/bin/yaml-lint \
 		../librenms-vendor-${PORTVERSION}/doctrine/dbal/bin/doctrine-dbal \
 		../librenms-vendor-${PORTVERSION}/justinrainbow/json-schema/bin/validate-json \
 		../librenms-vendor-${PORTVERSION}/nesbot/carbon/bin/carbon \
 		../librenms-vendor-${PORTVERSION}/nikic/php-parser/bin/php-parse \
 		../librenms-vendor-${PORTVERSION}/psy/psysh/bin/psysh \
 		../librenms-vendor-${PORTVERSION}/symfony/error-handler/Resources/bin/extract-tentative-return-types.php \
 		../librenms-vendor-${PORTVERSION}/symfony/error-handler/Resources/bin/patch-type-declarations \
 		../librenms-vendor-${PORTVERSION}/symfony/var-dumper/Resources/bin/var-dump-server \
 		../librenms-vendor-${PORTVERSION}/symfony/yaml/Resources/bin/yaml-lint \
 		addhost.php alerts.php artisan billing-calculate.php \
 		check-services.php config_to_json.php cronic daily.php daily.sh \
 		delhost.php discovery-wrapper.py discovery.php dist-pollers.php \
 		irc.php librenms-service.py LibreNMS/command_runner.py \
 		LibreNMS/wrapper.py lnms misc/lnms-completion.bash \
 		misc/smokeping-debian.example misc/smokeping-rhel.example \
 		pbin.sh ping.php poll-billing.php poller-wrapper.py poller.php \
 		renamehost.php scripts/auth_test.php scripts/bash_lint.sh \
 		scripts/check_requirements.py scripts/collect-port-polling.php \
 		scripts/collect-snmp-data.php scripts/composer_wrapper.php \
 		scripts/dynamic_check_requirements.py scripts/gen_rancid.php \
 		scripts/gen_smokeping.php scripts/git-pre-commit-hook.sh \
 		scripts/github-remove scripts/ifAlias scripts/json-app-tool.php \
 		scripts/manage_bills.php \
 		scripts/Migration/Standard_Conversion/convert_no_xml.sh \
 		scripts/Migration/Standard_Conversion/destwork_no_xml.sh \
 		scripts/Migration/Standard_Conversion/mkdir.sh \
 		scripts/Migration/XML_Conversion/convert.sh \
 		scripts/Migration/XML_Conversion/destwork.sh \
 		scripts/Migration/XML_Conversion/mkdir.sh scripts/new-os.php \
 		scripts/pre-commit.php scripts/purge-port.php \
 		scripts/removespikes.php scripts/removespikes.pl \
 		scripts/rename-mibs.php scripts/rrdstep.php \
 		scripts/save-test-data.php scripts/syslog-notify-oxidized.php \
 		scripts/test-alert.php scripts/test-template.php \
 		scripts/tune_port.php scripts/watchmaillog/watchmaillog.pl \
 		snmp-scan.py snmptrap.php syslog.php validate.php
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 SUB_FILES+=	pkg-message
 SUB_LIST+=	GROUP="${WWWGRP}" \
 		PHP="${PHPBASE}/bin/php" \
 		PYTHON=${PYTHON_CMD} \
 		PYTHON_VERSION=${PYTHON_VERSION} \
 		USER="${WWWOWN}" \
 		WWWDIR="${WWWDIR}"
 
 USERS=		www
 
 PORTDOCS=	*
 PORTEXAMPLES=	snmpd.conf.example
 
 DBDIR=		/var/db/${PORTNAME}
 
 OPTIONS_DEFINE=		DOCS EXAMPLES FPING IPMITOOL LIBVIRT MYSQLD NAGPLUGINS \
 			NMAP WMIC X11
 OPTIONS_DEFAULT=	FPING IPMITOOL LIBVIRT NAGPLUGINS NMAP PYPOLLER WMIC
 
 FPING_DESC=	Enable fping support ping monitoring
 IPMITOOL_DESC=	Enable support for monitoring hardware IPMI
 MYSQLD_DESC=	Use local MySQL server
 WMIC_DESC=	Enable support for WMI polling
 
 FPING_RUN_DEPENDS=	fping:net/fping
 IPMITOOL_RUN_DEPENDS=	ipmitool:sysutils/ipmitool
 LIBVIRT_RUN_DEPENDS=	virsh:devel/libvirt
 MYSQLD_USES=		mysql:server
 MYSQLD_USES_OFF=	mysql:client
 NAGPLUGINS_RUN_DEPENDS=	${LOCALBASE}/libexec/nagios/check_nagios:net-mgmt/nagios-plugins
 NMAP_RUN_DEPENDS=	nmap:security/nmap
 WMIC_RUN_DEPENDS=	wmic:net-mgmt/wmi-client
 X11_RUN_DEPENDS=	mtr:net/mtr
 X11_RUN_DEPENDS_OFF=	mtr:net/mtr-nox11
 X11_USES=		magick:6
 X11_USES_OFF=		magick:6,nox11
 
 _ROOT_FILES=		addhost.php alerts.php artisan billing-calculate.php \
 			check-services.php composer.json composer.lock \
 			config.php.default config_to_json.php cronic daily.php \
 			delhost.php discovery-wrapper.py discovery.php \
 			dist-pollers.php irc.php librenms-service.py mkdocs.yml \
 			pbin.sh phpunit.xml ping.php poll-billing.php \
 			poller.php poller-wrapper.py renamehost.php \
 			snmp-scan.py snmptrap.php syslog.php validate.php
 _SCRIPT_FILES=		daily.sh lnms
 # _RELEASE_TIMESTAMP is used for a patch inside the vendor code
 # it represents the release date via: git show --pretty='%H|%ct' -s 1.42.01
 # It sits here so you remember to update it with each release
 _RELEASE_TIMESTAMP=	1698378456
 _ROOT_DIRS=		LibreNMS app bootstrap config database doc html \
 			includes lang licenses mibs misc resources routes \
 			scripts tests
 _DOCS=			AUTHORS.md CHANGELOG.md CONTRIBUTING.md LICENSE.txt \
 			README.md
 
 # these are directories which require a generic @DIR entry in pkg-plist
 _STORAGE_DIRS=	app app/public debugbar framework framework/cache \
 		framework/cache/data framework/sessions framework/testing \
 		framework/views logs
 # these are directories which require a generic @DIR entry in pkg-plist
 _OTHER_DIRS=	database/seeders/config html/plugins html/js/lang \
 		resources/views/overview/custom tests/Browser/console \
 		tests/Browser/source tests/Browser/screenshots \
 		vendor/librenms/laravel-vue-i18n-generator/tests/output \
 		vendor/symfony/string/Resources/bin
 
 post-patch:
 	${REINPLACE_CMD} -e 's|%%LOCALBASE%%|${LOCALBASE}|g' \
 		${WRKSRC}/LibreNMS/__init__.py \
 		${WRKSRC}/LibreNMS/wrapper.py \
 		${WRKSRC}/LibreNMS/Util/Version.php \
 		${WRKSRC}/LibreNMS/Validations/Php.php \
 		${WRKSRC}/LibreNMS/Validations/System.php \
 		${WRKSRC}/config.php.default \
 		${WRKSRC}/includes/html/output/capture.inc.php \
 		${WRKSRC}/poller-wrapper.py \
 		${WRKSRC}/snmp-scan.py
 	${REINPLACE_CMD} 's|%%PORTVERSION%%|${PORTVERSION}|g'              ${WRKSRC}/LibreNMS/Util/Version.php
 	${REINPLACE_CMD} 's|%%RELEASE_TIMESTAMP%%|${_RELEASE_TIMESTAMP}|g' ${WRKSRC}/LibreNMS/Util/Version.php
 	${REINPLACE_CMD} 's|%%WWWDIR%%|${WWWDIR}|g'                        ${WRKSRC}/dist/librenms-scheduler.cron
 	${REINPLACE_CMD} 's|%%LOCALBASE%%|${LOCALBASE}|g'                  ${WRKSRC}/dist/librenms-scheduler.cron
 	${REINPLACE_CMD} 's|%%USER%%|${WWWOWN}|g'                          ${WRKSRC}/dist/librenms-scheduler.cron
 	${RM} ${WRKSRC}/LibreNMS/Validations/Updates.php
 	${RM} -rf ${WRKSRC}/logs
 
 do-install:
 	${MKDIR} ${STAGEDIR}/${WWWDIR}
 .for dir in ${_ROOT_DIRS}
 	${MKDIR} ${STAGEDIR}/${WWWDIR}/${dir}
 	(cd ${WRKSRC}/${dir} && ${COPYTREE_SHARE} . ${STAGEDIR}/${WWWDIR}/${dir})
 .endfor
 .for f in ${_ROOT_FILES}
 	${INSTALL_DATA} ${WRKSRC}/${f} ${STAGEDIR}/${WWWDIR}
 .endfor
 .for f in ${_SCRIPT_FILES}
 	${INSTALL_SCRIPT} ${WRKSRC}/${f} ${STAGEDIR}/${WWWDIR}
 .endfor
 	# avoid: Error: lnms file is owned by root, it should be owned and ran by a non-privileged user
 	${ECHO_CMD} "@(www,wheel,0555) www/${PORTNAME}/lnms" >> ${TMPPLIST}
 
 	${MKDIR} ${STAGEDIR}/${WWWDIR}/vendor
 	(cd ${WRKDIR}/${PORTNAME}-vendor-${PORTVERSION} && ${COPYTREE_SHARE} . ${STAGEDIR}/${WWWDIR}/vendor)
 
 # As of 1.66_1, the package installs bootstrap/cache
 # This was previously left to the code to populate.
 # That causese problems when the code doesn't do that update.
 	${MV} ${STAGEDIR}/${WWWDIR}/vendor/bootstrap-cache/* ${STAGEDIR}/${WWWDIR}/bootstrap/cache/
 	${RM} -rf ${STAGEDIR}/${WWWDIR}/vendor/bootstrap-cache
 
 # similarly with html/js/lang
 	${MV} ${STAGEDIR}/${WWWDIR}/vendor/html-js-lang/* ${STAGEDIR}/${WWWDIR}/html/js/lang/
 	${RM} -rf ${STAGEDIR}/${WWWDIR}/vendor/html-js-lang
 
 # Files in scripts dir should be executable
 	${FIND} ${STAGEDIR}/${WWWDIR}/scripts -type f -exec ${CHMOD} +x {} \;
 # Ensure PHP and Python scripts are executable
 	${FIND} ${STAGEDIR}/${WWWDIR} -type f -name '*.py' -or -type f -name \
 	       '*.php' -exec ${CHMOD} +x {} \;
 # these values should be outside the www tree now
 	${MKDIR} ${STAGEDIR}/var/log/${PORTNAME}
 	${MKDIR} ${STAGEDIR}${DBDIR}
 	${MKDIR} ${STAGEDIR}${DBDIR}/storage
 	${MKDIR} ${STAGEDIR}/var/run/${PORTNAME}
 	(cd ${STAGEDIR}/${WWWDIR} && ${LN} -s ../../../..${DBDIR}/storage)
 
 do-install-DOCS-on:
 	${MKDIR} ${STAGEDIR}/${DOCSDIR}
 .for f in ${_DOCS}
 	${INSTALL_DATA} ${WRKSRC}/${f} ${STAGEDIR}/${DOCSDIR}
 .endfor
 	cd ${WRKSRC}/doc && ${COPYTREE_SHARE} . ${STAGEDIR}/${DOCSDIR}
 
 do-install-EXAMPLES-on:
 	${MKDIR} ${STAGEDIR}/${EXAMPLESDIR}
 .for f in ${PORTEXAMPLES}
 	${INSTALL_DATA} ${WRKSRC}/${f} ${STAGEDIR}/${EXAMPLESDIR}
 .endfor
 
 post-install:
 	${FIND} -s ${STAGEDIR}${WWWDIR} -type f '(' -name '*.orig' -or -name '*.bak' -or -name '.gitignore' ')' -delete
 	${FIND} -s ${STAGEDIR}${WWWDIR} -not -type d | ${SORT} | \
 		${SED} -e 's#^${STAGEDIR}${PREFIX}/##' | grep -v www/librenms/lnms >> ${TMPPLIST}
 
 # we do this file separately because it needs a different chmod/chown
 # it will eventually contains secrets
 	${INSTALL_DATA} ${WRKSRC}/.env.example ${STAGEDIR}/${WWWDIR}
 	${ECHO_CMD} "@dir(www,www,0775) ${DBDIR}/storage" >> ${TMPPLIST}
 	${ECHO_CMD} "@dir(www,www,0775) ${DBDIR}" >> ${TMPPLIST}
 	${ECHO_CMD} "@dir(www,www,0775) /var/log/${PORTNAME}" >> ${TMPPLIST}
 	${ECHO_CMD} "@(root,www,0750) ${WWWDIR}/.env.example" >> ${TMPPLIST}
 
 	${ECHO_CMD} "@dir(www,www,0775) ${WWWDIR}/bootstrap/cache" >> ${TMPPLIST}
 	${ECHO_CMD} "@dir(www,www,0775) /var/run/${PORTNAME}" >> ${TMPPLIST}
 .for f in ${_STORAGE_DIRS}
 	${MKDIR} ${STAGEDIR}/${DBDIR}/storage/${f}
 	${ECHO_CMD} "@dir(root,www,0775) ${DBDIR}/storage/${f}" >> ${TMPPLIST}
 .endfor
 .for f in ${_OTHER_DIRS}
 	${ECHO_CMD} "@dir(root,www,0775) ${WWWDIR}/${f}" >> ${TMPPLIST}
 .endfor
 
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/newsyslog.conf.d
 	${INSTALL_DATA} ${FILESDIR}/newsyslog.conf.sample ${STAGEDIR}/${PREFIX}/etc/newsyslog.conf.d/librenms.conf.sample
 	${ECHO_CMD} "@dir etc/newsyslog.conf.d" >> ${TMPPLIST}
 	${ECHO_CMD} "@sample etc/newsyslog.conf.d/librenms.conf.sample" >> ${TMPPLIST}
 
 	${MKDIR} ${STAGEDIR}/${WWWDIR} ${STAGEDIR}${PREFIX}/etc/cron.d/
 	${INSTALL_DATA} ${WRKSRC}/dist/librenms-scheduler.cron ${STAGEDIR}${PREFIX}/etc/cron.d/librenms
 	${ECHO_CMD} "@dir etc/cron.d" >> ${TMPPLIST}
 	${ECHO_CMD} "etc/cron.d/librenms" >> ${TMPPLIST}
 
 # avoid the "Global lnms shortcut not installed." validataion warning.
 # this can also be run as root.
 	${RLN} ${STAGEDIR}${WWWDIR}/lnms ${STAGEDIR}${PREFIX}/bin/lnms
 	${ECHO_CMD} "bin/lnms" >> ${TMPPLIST}
 
 .include <bsd.port.mk>
diff --git a/www/piwigo/Makefile b/www/piwigo/Makefile
index b827ae504611..bd136934f6d3 100644
--- a/www/piwigo/Makefile
+++ b/www/piwigo/Makefile
@@ -1,86 +1,87 @@
 PORTNAME=	piwigo
 DISTVERSION=	13.8.0
 PORTREVISION=	1
 PKGNAMESUFFIX=	${PHP_PKGNAMESUFFIX}
 CATEGORIES=	www
 MASTER_SITES=	https://piwigo.org/download/dlcounter.php?code=${PORTVERSION}&/
 
 MAINTAINER=	netchild@FreeBSD.org
 COMMENT=	PHP based Web Gallery
 WWW=		https://piwigo.org/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/doc/COPYING
 
 USES=		cpe php:web,flavors zip
-USE_PHP=	ctype dom exif filter gd hash iconv json mbstring mysqli \
-		openssl pcre pdo session simplexml sodium spl tokenizer \
+# php hash/json/openssl/pcre/spl extension is required but it's statically linked in default php
+USE_PHP=	ctype dom exif filter gd iconv mbstring mysqli \
+		pdo session simplexml sodium tokenizer \
 		xml zip zlib
 # sodium is needed for randomisation stuff (prefferred option),
 # 	could be replaced by mcrypt
 # zip is used by an optional plugin
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 SUB_FILES=	pkg-message
 SUB_LIST+=	CHOWN="${CHOWN}" \
 		CP="${CP}" \
 		MKDIR="${MKDIR}" \
 		TOUCH="${TOUCH}" \
 		WWWGRP="${WWWGRP}" \
 		WWWOWN="${WWWOWN}"
 
 WRKSRC=		${WRKDIR}/${PORTNAME}
 
 PLIST_SUB+=	CHOWN="${CHOWN}" \
 		WWWGRP="${WWWGRP}" \
 		WWWOWN="${WWWOWN}"
 PORTDOCS=	README_ca.txt README_en.txt README_fr.txt
 
 OPTIONS_DEFINE=		DOCS EXAMPLES
 OPTIONS_GROUP=		OPT
 OPTIONS_GROUP_OPT=	EXIFTOOL FFMPEG IMAGICK MEDIAINFO
 
 EXIFTOOL_DESC=	exiftool support (for plugins)
 IMAGICK_DESC=	${IMAGEMAGICK_DESC}
 MEDIAINFO_DESC=	mediainfo support (for plugins)
 OPT_DESC=	Optional dependencies
 
 EXIFTOOL_RUN_DEPENDS=	exiftool:graphics/p5-Image-ExifTool
 FFMPEG_RUN_DEPENDS=	ffmpeg:multimedia/ffmpeg
 IMAGICK_RUN_DEPENDS=	${PECL_PKGNAMEPREFIX}imagick>=2.2.2:graphics/pecl-imagick@${PHP_FLAVOR}
 MEDIAINFO_RUN_DEPENDS=	mediainfo:multimedia/mediainfo
 
 .include <bsd.port.pre.mk>
 
 pre-install-DOCS-on:
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}/
 	@cd ${WRKSRC}/doc/ && ${INSTALL_DATA} ${PORTDOCS} ${STAGEDIR}${DOCSDIR}/
 
 pre-install-EXAMPLES-on:
 	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}/
 	@cd ${WRKSRC}/tools/ && ${COPYTREE_SHARE} . ${STAGEDIR}${EXAMPLESDIR}/
 
 do-install:
 	@cd ${WRKSRC}/doc/ && ${RM} ${PORTDOCS}
 	@${RM} -r ${WRKSRC}/tools ${WRKSRC}/_data/dummy.txt
 	@${INSTALL} -d ${STAGEDIR}${WWWDIR}
 	@${TAR} -C ${WRKSRC} -cf - . | \
 	${TAR} --unlink -C ${STAGEDIR}${WWWDIR} -xf -
 
 gen-plist:
 	${ECHO} '@dir(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/language' > ${PLIST}.new
 	${ECHO} '@dir(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/plugins' >> ${PLIST}.new
 	${ECHO} '@dir(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/themes' >> ${PLIST}.new
 	${FIND} ${STAGEDIR}${PREFIX} -type f -o -type l | \
 	    ${SED} -e "s:${STAGEDIR}${PREFIX}/::g ; \
 	        s:www/piwigo/language:@(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/language:g ; \
 		s:www/piwigo/plugins:@(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/plugins:g ; \
 		s:www/piwigo/themes:@(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/themes:g ; \
 	    	s:www/piwigo:%%WWWDIR%%:g ; \
 		s:share/examples/piwigo:%%PORTEXAMPLES%%%%EXAMPLESDIR%%:g ;" |  \
 	    ${GREP} -v -E '^share/(doc|licenses)/' | ${SORT} >> ${PLIST}.new
 	${ECHO} '@dir(%%WWWOWN%%,%%WWWGRP%%,777) %%WWWDIR%%/_data' >> ${PLIST}.new
 	${ECHO} '@dir(%%WWWOWN%%,%%WWWGRP%%,750) %%WWWDIR%%/upload' >> ${PLIST}.new
 
 .include <bsd.port.post.mk>
diff --git a/www/suitecrm/Makefile b/www/suitecrm/Makefile
index ab9753f86c0c..15b2e999c165 100644
--- a/www/suitecrm/Makefile
+++ b/www/suitecrm/Makefile
@@ -1,39 +1,40 @@
 PORTNAME=	suitecrm
 PORTVERSION=	7.14.0
 CATEGORIES=	www
 MASTER_SITES=	https://suitecrm.com/download/141/suite84/562969/
 
 MAINTAINER=	wen@FreeBSD.org
 COMMENT=	Open source Customer Relationship Management (CRM) software solution
 WWW=		http://www.suitercrm.com/
 
 LICENSE=	AGPLv3
 LICENSE_FILE=	${WRKSRC}/LICENSE.txt
 
 USES=		php zip
-USE_PHP=	curl ctype dom filter gd imap json mysqli pcre pdo posix \
-		session spl tokenizer xml mbstring zip zlib
+# php json/pcre/spl extension is required but it's statically linked in default php
+USE_PHP=	curl ctype dom filter gd imap mysqli pdo posix \
+		session tokenizer xml mbstring zip zlib
 NO_BUILD=	yes
 
 WRKSRC=		${WRKDIR}/SuiteCRM-${PORTVERSION}
 
 PLIST=		${WRKDIR}/plist
 CRMDIR=		www/suitecrm
 
 SUB_FILES+=	pkg-message
 
 pre-install:
 	@${ECHO_CMD} "@owner ${WWWOWN}" >> ${PLIST}
 	@${ECHO_CMD} "@group ${WWWGRP}" >> ${PLIST}
 	@${ECHO_CMD} "@mode 755" >> ${PLIST}
 	@${FIND} -s -d ${WRKSRC} -type f | ${SED} "s?${WRKSRC}?${CRMDIR}?g" >>${PLIST}
 	@${FIND} -s -d ${WRKSRC} -type d  | ${SED} "s?${WRKSRC}?@dir ${CRMDIR}?g" >> ${PLIST}
 	@${ECHO_CMD} "@mode" >> ${PLIST}
 	@${ECHO_CMD} "@group" >> ${PLIST}
 	@${ECHO_CMD} "@owner" >> ${PLIST}
 
 do-install:
 	@${MKDIR} ${STAGEDIR}/${WWWDIR}
 	@cd ${WRKSRC} && ${COPYTREE_SHARE} . ${STAGEDIR}/${WWWDIR}/
 
 .include <bsd.port.mk>
diff --git a/www/thundersnarf/Makefile b/www/thundersnarf/Makefile
index e07a14b78599..ad9ec730f645 100644
--- a/www/thundersnarf/Makefile
+++ b/www/thundersnarf/Makefile
@@ -1,65 +1,66 @@
 PORTNAME=	thundersnarf
 PORTVERSION=	1.3
 PORTREVISION=	6
 PORTEPOCH=	1
 CATEGORIES=	www
 MASTER_SITES=	http://www.tracanelli.com.br/l/dev/thunder/ \
 		LOCAL/jmelo
 
 MAINTAINER=	eksffa@freebsdbrasil.com.br
 COMMENT=	Web reporting and trending analysis for Thunder Cache Pro
 WWW=		http://www.thundercache.com.br
 
 OPTIONS_DEFINE=	APACHE PHP PGSQL DOCS
 OPTIONS_DEFAULT=APACHE PHP PGSQL
 APACHE_DESC=	Install apache for reporting viewing
 PHP_DESC=	Install PHP for reporting generating
 PGSQL_DESC=	Install PostgreSQL (report data storing)
 
 USES=		tar:bzip2
 
 PHP_USES=	php
 PHP_VARS=	IGNORE_WITH_PHP=81 82 83
 
 NO_BUILD=	yes
 NO_ARCH=	yes
 WRKSRC=		${WRKDIR}/${PORTNAME}
 PLIST_SUB=	OWNER=${WWWOWN} GROUP=${WWWGRP}
 
 .include <bsd.port.options.mk>
 
 .if ${PORT_OPTIONS:MAPACHE}
 USES+=		apache:run
 .endif
 
 .if ${PORT_OPTIONS:MPGSQL}
 USES+=		pgsql
 WANT_PGSQL=	server
 .endif
 
 .if ${PORT_OPTIONS:MPHP}
-USE_PHP+=	curl bcmath pdo mcrypt session pgsql spl dom xmlrpc ctype simplexml soap
+# php spl extension is required but it's statically linked in default php
+USE_PHP+=	curl bcmath pdo mcrypt session pgsql dom xmlrpc ctype simplexml soap
 .  if ${PORT_OPTIONS:MPGSQL}
 USE_PHP+=	pdo_pgsql pgsql
 .  endif
 .endif
 
 LIB_DEPENDS+=	libcurl.so:ftp/curl
 
 SUB_FILES=	pkg-message
 
 post-extract:
 	# Present on FreeBSD 8 and 9 after extraction
 	@${RM} ${WRKSRC}/protected/data/bin/._thundersnarf
 
 do-install:
 	@${MKDIR} ${STAGEDIR}${WWWDIR}
 	cd ${WRKSRC} && ${COPYTREE_SHARE} \* ${STAGEDIR}${WWWDIR}
 	${INSTALL_SCRIPT} ${WRKSRC}/protected/data/bin/thundersnarf* \
 		${STAGEDIR}${PREFIX}/bin/
 
 do-install-DOCS-on:
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}
 	${INSTALL_DATA} ${WRKSRC}/README ${STAGEDIR}${DOCSDIR}/README.pt_BR
 
 .include <bsd.port.mk>
diff --git a/www/tt-rss/Makefile b/www/tt-rss/Makefile
index 2c90195a6779..9985bd19a269 100644
--- a/www/tt-rss/Makefile
+++ b/www/tt-rss/Makefile
@@ -1,74 +1,74 @@
 PORTNAME=	tt-rss
 PORTVERSION=	g20231004
 PORTEPOCH=	2
 CATEGORIES=	www
 
 MAINTAINER=	dereks@lifeofadishwasher.com
 COMMENT=	Tiny Tiny RSS: web-based news feed (RSS/Atom) aggregator
 WWW=		https://tt-rss.org/
 
 LICENSE=	GPLv2
 
 RUN_DEPENDS=	${LOCALBASE}/bin/git:devel/git
 
 USES=		gettext-tools php:cli,web shebangfix
 
 USE_GITLAB=	yes
 GL_SITE=	https://gitlab.tt-rss.org
 GL_TAGNAME=	c779e2ba0d71942579dd27ccdcad0295bd06e45f
-
-USE_PHP=	ctype dom exif fileinfo filter iconv intl json mbstring openssl \
+# phe json/openssl extension is required but it's statically linked in default php
+USE_PHP=	ctype dom exif fileinfo filter iconv intl mbstring \
 		pcntl pdo phar posix session simplexml sockets tokenizer xml \
 		xmlwriter zip
 USE_RC_SUBR=	ttrssd
 
 SHEBANG_FILES=	update.php update_daemon2.php
 
 REINPLACE_ARGS=	-i ""
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 # Instead of depending on the extact database driver list php packages that tt-rss
 # depends on during install pkg-message as a post install setup.
 # mysql: php-mysqli php-pdo_mysql
 # pgsql: php-pgsql php-pdo_pgsql
 #
 # from Mk/Uses/php.mk create sub vars for mysqli/pdo_mysql pgsql/pdo_pgsql values
 SUB_FILES=	config.php httpd-tt-rss.conf pkg-message ttrss_db_check.php
 SUB_LIST=	MYSQL_DEPS="${mysqli_DEPENDS:T} ${pdo_mysql_DEPENDS:T}" \
 		PGSQL_DEPS="${pgsql_DEPENDS:T} ${pdo_pgsql_DEPENDS:T}" \
 		WWWOWN=${WWWOWN}
 
 PLIST_SUB=	WWWGRP=${WWWGRP} \
 		WWWOWN=${WWWOWN}
 
 OPTIONS_DEFINE=		CURL GD
 OPTIONS_DEFAULT=	CURL GD
 
 CURL_DESC=	Use SimplePie instead of Magpie
 GD_DESC=	Use OTP QR code generation
 
 CURL_USE=	PHP=curl
 GD_USE=		PHP=gd
 
 do-install:
 	${MKDIR} \
 		${STAGEDIR}${WWWDIR} \
 		${STAGEDIR}${DATADIR} \
 		${STAGEDIR}${EXAMPLESDIR}
 	(cd ${WRKSRC} && ${COPYTREE_SHARE} "*" ${STAGEDIR}${WWWDIR} \
 		"! -name LICENSE ! -name .empty ! -name Jenkinsfile")
 	${RM} -r ${STAGEDIR}${WWWDIR}/debian
 	${INSTALL_DATA} ${WRKDIR}/httpd-tt-rss.conf ${STAGEDIR}${DATADIR}
 	${ECHO} "${OPSYS}:${PORTVERSION}:${GL_TAGNAME:C/^(.{11}).*$/\1/W}}" > \
 		"${STAGEDIR}${WWWDIR}/version_static.txt"
 	${RM} ${STAGEDIR}${WWWDIR}/config.php-dist
 	${INSTALL_DATA} ${WRKDIR}/config.php \
 		${STAGEDIR}${WWWDIR}/config.php.sample
 	${INSTALL_DATA} ${WRKDIR}/ttrss_db_check.php \
 		${STAGEDIR}${WWWDIR}/ttrss_db_check.php
 	${INSTALL_DATA} ${FILESDIR}/newsyslog.sample \
 		${STAGEDIR}${EXAMPLESDIR}
 
 .include <bsd.port.mk>
diff --git a/www/typo3-12/Makefile b/www/typo3-12/Makefile
index fc53a3593c16..ce63153fa203 100644
--- a/www/typo3-12/Makefile
+++ b/www/typo3-12/Makefile
@@ -1,77 +1,78 @@
 PORTNAME=	typo3
 DISTVERSION=	${PORT_V_MAJOR}.${PORT_V_MINOR}.${PORT_V_PATCH}
 CATEGORIES=	www
 MASTER_SITES=	https://typo3.azureedge.net/typo3/${DISTVERSION}/
 PKGNAMESUFFIX=	-${PORT_V_MAJOR}${PHP_PKGNAMESUFFIX}
 DISTNAME=	${PORTNAME}_src-${DISTVERSION}
 
 MAINTAINER=	freebsd-ports@charlieroot.de
 COMMENT=	Typo3 content management system
 WWW=		https://typo3.org/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE.txt
 
 IGNORE_WITH_MYSQL=	57
 IGNORE_WITH_PHP=	80 83
 
 USES=		cpe php:web,flavors shebangfix
+# php openssl extension is required but it's statically linked in default php
 USE_PHP=	ctype dom fileinfo filter gd intl \
-		mbstring openssl pdo session simplexml \
+		mbstring pdo session simplexml \
 		tokenizer xml zip zlib
 
 WRKSRC=		${WRKDIR}/${PORTNAME}_src-${PORTVERSION}
 SHEBANG_GLOB=	*.sh *.php
 NO_ARCH=	yes
 NO_BUILD=	yes
 PORTSCOUT=	limit:^${PORT_V_MAJOR}\.${PORT_V_MINOR}\.
 SUB_FILES=	pkg-message
 SUB_LIST+=	PREFIX=${PREFIX} \
 		TYPO3WWW=${TYPO3WWW} \
 		TYPO3DIR=${TYPO3DIR}
 
 PORT_V_MAJOR=	12
 PORT_V_MINOR=	4
 PORT_V_PATCH=	7
 
 TYPO3DIR=	www/${PORTNAME}-${PORT_V_MAJOR}
 
 OPTIONS_DEFINE=	CURL GMP IMAGICK MYSQL POSTGRES SQLITE
 OPTIONS_DEFAULT=MYSQL
 
 IMAGICK_DESC=	${IMAGEMAGICK_DESC}
 MBSTRING_DESC=	${MULTIBYTE_DESC}
 MYSQL_DESC=	Use MySQL as DBMS
 POSTGRES_DESC=	Use PostgreSQL as DBMS
 SQLITE_DESC=	Use SQLite as DBMS
 
 CURL_USE=	PHP=curl
 GMP_USE=	PHP=gmp
 MYSQL_USE=	PHP=mysqli
 POSTGRES_USE=	PHP=pgsql
 SQLITE_USE=	PHP=sqlite3
 
 .include <bsd.port.options.mk>
 
 .if ${PORT_OPTIONS:MIMAGICK}
 .if ${PORT_OPTIONS:MX11}
 USES+=		magick:7,run
 .else
 USES+=		magick:7,run,nox11
 .endif
 .endif
 
 do-install:
 	@cd ${WRKSRC} && ${COPYTREE_SHARE} . ${STAGEDIR}${PREFIX}/${TYPO3DIR}
 
 post-install:
 	@${ECHO_CMD} "@owner ${WWWOWN}" >> ${TMPPLIST}
 	@${ECHO_CMD} "@group ${WWWGRP}" >> ${TMPPLIST}
 	@${ECHO_CMD} "@mode 755" >> ${TMPPLIST}
 	@${FIND} -s -d ${WRKSRC} -type f | ${SED} "s?${WRKSRC}?${TYPO3DIR}?g" >>${TMPPLIST}
 	@${FIND} -s -d ${WRKSRC} -type d  | ${SED} "s?${WRKSRC}?@dir ${TYPO3DIR}?g" >> ${TMPPLIST}
 	@${ECHO_CMD} "@mode" >> ${TMPPLIST}
 	@${ECHO_CMD} "@group" >> ${TMPPLIST}
 	@${ECHO_CMD} "@owner" >> ${TMPPLIST}
 
 .include <bsd.port.mk>
diff --git a/www/webtrees21/Makefile b/www/webtrees21/Makefile
index 7bc8da2fbbb9..886885d63f3a 100644
--- a/www/webtrees21/Makefile
+++ b/www/webtrees21/Makefile
@@ -1,36 +1,36 @@
 PORTNAME=	webtrees
 PORTVERSION=	2.1.18
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/fisharebest/${PORTNAME}/releases/download/${PORTVERSION}/
 PKGNAMESUFFIX=	21
 
 MAINTAINER=	ports@bsdserwis.com
 COMMENT=	Online genealogy viewer (for PHP 7.4-8.2)
 WWW=		https://webtrees.net/
 
 LICENSE=	GPLv3+
 
 USES=		cpe php shebangfix zip
-
-USE_PHP=	calendar curl dom filter gd iconv pcre pdo_mysql session xml
+# php pcre extension is required but it's statically linked in default php
+USE_PHP=	calendar curl dom filter gd iconv pdo_mysql session xml
 
 SHEBANG_FILES=	webtrees/vendor/tecnickcom/tcpdf/tools/tcpdf_addfont.php
 
 WWWDIR=		${PREFIX}/www/webtrees${PKGNAMESUFFIX}
 EXTRACT_AFTER_ARGS=	-d ${WRKSRC}
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 SUB_FILES=	pkg-message pkg-deinstall
 SUB_LIST=	VERSION_SUFFIX=${PKGNAMESUFFIX}
 
 do-install:
 	-${MKDIR} ${STAGEDIR}${WWWDIR}
 	@cd ${WRKSRC}/${PORTNAME} && ${COPYTREE_BIN} . ${STAGEDIR}${WWWDIR} "! -name *\.md"
 	@(cd ${WRKSRC}/${PORTNAME}; ${FIND} . -not -type d) | ${SORT} | \
 		${SED} -ne 's,^${PORTNAME}/,${WWWDIR_REL}/,p' >> ${TMPPLIST}
 	@${ECHO_CMD} \
 		'@postexec ${CHOWN} -R ${WWWOWN}:${WWWGRP} %D/${WWWDIR_REL}/data' \
 		>> ${TMPPLIST}
 
 .include <bsd.port.mk>