Shared in Technology@lemmy.world 4 days ago

Today's PHP Security Release, and How We're Strengthening PHP Security

Linked to https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

0/2000

Junkernaught@lemmy.dbzer0.com 4 days ago

The ‘S’ in PHP stands for ‘Secure’.

boobookittyfrick@lemmy.zip 3 days ago

dudeface@lemmy.world 4 days ago

Wonder how out of control this stuff will get

It’s not like these widely used languages are corporate backed, they may receive donation actions but nobody is hiring security researchers to focus on PHP

Facebook uses its own version of PHP so it is likely not too concerned what happens to the original

BuckFutter@timeyak.com 4 days ago

Hard to say but there is a call for donations to the php foundation in the message. Yah php still has it uses, but doesn’t appear to be as wildly used for new projects. Albeit lots of old ones still use it alot.

dudeface@lemmy.world 4 days ago

I would say laravel is as popular as any other framework, it obviously includes JavaScript components also but I hear about more than any singular full JavaScript framework (probably because there is so many)

icerunner_origin@startrek.website 4 days ago

PHP, of course, stands for ‘Patch Hastily: PHP’

BuckFutter@timeyak.com 4 days ago

Wonder if we will hear of another PHP RCE drop before the year is over lol

Rimu@piefed.social 4 days ago

I think we will. This looks like a new class of vulnerability so there will be others of a similar nature.

BuckFutter@timeyak.com 4 days ago

Interesting chain of events that led us to today’s urgent php patching.

boobookittyfrick@lemmy.zip 3 days ago

Good thing I don’t use that crap for anything… what happened anyway? I saw an email from digital ocean telling me to update stuff

BuckFutter@timeyak.com 3 days ago

Two year old bug that lead to a RCE under certain conditions was recently turned into an active exploit thanks to llms…or something along those lines.