#RedditR

I contacted several places which used PHP and I also run a self-hosted LAMP stack. I believe from their answers and updating to the latest, it will be ok for those places. I don't know how anyone else feels. I love php by the way. Woot woot.…

No need to panic, it's pretty unlikely to be exploitable, given the conditions they list afterwards. If like me you already disabled this paramater anyway on Wednesday, you're gold. submitted by /u/C0c04l4 [link] [comments]

The recent advisory suggested setting session.upload_progress.enabled=0 as a mitigation. The risky path needs an unusual setup (a serialize handler switched at runtime with ini_set()), but the feature is on by default, and most apps never use upload…

Hey! I've been working on xph, an compiler that lets you write single-file JSX components that compile into native PHP files and static assets.…

I know many people are looking for clicks and to feed traffic to their blogs/posts/vlogs/etc. But please stop with PHP2Shell, its over and nothing happened. Let the haters hate and lets move on.…

The shinsenter/php Docker images were recently rebuilt and patched to fix two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) enabling unauthenticated remote code execution via memory corruption in out-of-memory error handling.…

For years I've used PHP-CS-Fixer on both personal and commercial projects. I like its ruleset, but I also like how fast Mago is. So when I started working on a PHP compiler, I decided to build a formatter that follows PHP-CS-Fixer's rules and runs at a…

TL;DR:* ported upstream 712e60f9ed into the Webtatic php71w 7.1.33 SRPM, rebuilt on a CentOS 7 container, ~35 min to build, ~6 s of php-fpm downtime per host. Two gotchas at the bottom.…

Years ago, I setup my server's php-fpm inside a chroot, just to be extra safe. Many blog posts from the time said they either do not bother or use containers instead.…

First, thanks to everyone who spent 2 months working on this vulnerability, developing the patch, and coordinating the disclosure. The effort is appreciated.…

I build and run onllm.dev, my studio site and blog, and the rebuild went live on 24 October. Plain PHP (7.4+) and MySQL behind Apache rewrites on Hostinger shared hosting. No framework.…

Obviously just a stupid satirical post, but a plot twist of php2shell just being a ploy to get people to update their PHP versions would be funny. :) submitted by /u/Alarmed-Dog-9141 [link] [comments]

Hello everyone! Have you ever been to situation when you miss C-style `#include` in PHP? I.e. a directive that simple inserts contents of a file at compile time submitted by /u/Low_Lawyer_5684 [link] [comments]

You can watch a video of it in the project's README: https://github.com/illegalstudio/elephc submitted by /u/petrucc [link] [comments]

Hey folks. I have been building Carve, a modern lightweight markup language for content that outgrows Markdown (and Djot). For humans and agents working on the same docs. After many months of specs and coding, it should finally be stable enough now.…

Static analysis, formatters, typed properties, enums, readonly classes, attributes, Pest or PHPUnit, mutation testing, there’s a lot to choose from. Which single tool or feature changed your day-to-day work the most?…

A developer deliberately left a PHP server unpatched and challenged hackers to steal more than $2,000 in Bitcoin. According to TechTimes UK, the challenge lasted 19.28 hours, but there were a couple of unexpected complications.…

Hey there! This subreddit isn't meant for help threads, though there's one exception to the rule: in this thread you can ask anything you want PHP related, someone will probably be able to help you out! submitted by /u/brendt_gd [link] [comments]

Hey there! This subreddit isn't meant for help threads, though there's one exception to the rule: in this thread you can ask anything you want PHP related, someone will probably be able to help you out! submitted by /u/brendt_gd [link] [comments]