PHP News (@PHPNewsnet) header
PHP News (@PHPNewsnet) profile picture

PHP News

@PHPNewsnet

Covering PHP news since 2026

phpnews.net
Joined August 2026
  • Tweets111
  • Following3
  • Followers281
4Media
Photo by PHP News (@PHPNewsnet)Photo by PHP News (@PHPNewsnet)Photo by PHP News (@PHPNewsnet)Photo by PHP News (@PHPNewsnet)
Finland took government sites offline. SEPTA's transit tracking went dark. The BBC's cyber correspondent learned PHP existed the day before he explained it on air. The php2shell week showed how much runs on PHP: phpnews.net/php2shell-php-re…
The php2shell Scare Showed How Much Runs on PHP

The php2shell Scare Showed How Much Runs on PHP

The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it.

phpnews.net
2
79
PHP's Early Design Tradeoffs, Seen by a Kernel Developer tag1.com/blog/from-malloc-to…
From Malloc to Match (Part 1): The Evolution of PHP Through the Lens of a Systems Programmer

From Malloc to Match (Part 1): The Evolution of PHP Through the Lens of a Systems Programmer

Jeremy Andrews, Tag1 Founding Partner and CEO, traces the trades PHP made for ease of use and what they cost Drupal performance through Drupal 7.

tag1.com
39
Cooldown Policies for New Package Versions in Composer 2.11 phpnews.net/composer-2-11
Cooldown Policies for New Package Versions in Composer 2.11

Cooldown Policies for New Package Versions in Composer 2.11

Composer 2.11 can hold back newly published package versions for a period you set. It also ships nine security fixes and removes the dist-to-source fallback.

phpnews.net
2
61
One week until Laracon AU 2026, starting November 4. phpnews.net/events/laracon-a…
Laracon AU 2026

Laracon AU 2026

Laracon AU 2026 takes place November 4-6 at QUT Gardens Theatre in Brisbane

phpnews.net
2
81
"If you're going to let AI write code, you have to let AI write all the code. Otherwise, you're the bottleneck. You're the weak link." jasonmccreary.me/articles/i-…
Jason McCreary - I don't write code anymore

Jason McCreary - I don't write code anymore

25 years of chiseling code by hand has ended. AI now writes all my code. And I've grown okay with that.

jasonmccreary.me
2
90
PHP 8.2 End of Life: Plan Your Upgrade Before Dec 31 phpnews.net/php-8-2-end-of-l…
PHP 8.2 End of Life: Plan Your Upgrade Before Dec 31

PHP 8.2 End of Life: Plan Your Upgrade Before Dec 31

PHP 8.2 security support ends December 31, 2026. See the support dates for 8.3 through 8.5, how to pick a target, and a checklist for upgrading production.

phpnews.net
2
9
433
Cloudflare Opens a PHP CTF to Test Its php2shell WAF Rules phpnews.net/cloudflare-php-c…
Cloudflare Opens a PHP CTF to Test Its php2shell WAF Rules

Cloudflare Opens a PHP CTF to Test Its php2shell WAF Rules

Cloudflare put a vulnerable PHP 8.5.11 server behind its WAF and invites HackerOne researchers to bypass the php2shell rules and capture a flag.

phpnews.net
1
9
3
68
29,704
This week's PHP News newsletter is out: The php2shell Scare Showed How Much Runs on PHP phpnews.net/newsletter/archi…

The php2shell Scare Showed How Much Runs on PHP

7 stories and 10 community links from the week of Oct 20 - Oct 27, 2026.

phpnews.net
1
2
967
PHP Windows Builds Patch Brotli CVE-2026-111497 phpnews.net/php-windows-brot…
PHP Windows Builds Patch Brotli CVE-2026-111497

PHP Windows Builds Patch Brotli CVE-2026-111497

Rebuilt PHP Windows binaries 8.2.35-1 to 8.5.12-1 ship Brotli 1.2.1 to fix CVE-2026-111497. The PHP version doesn't change, so check for the -1 build.

phpnews.net
1
169
On the use of Enums garfieldtech.com/blog/on-the…

On the use of Enums

How, when, and when not to use Enums in PHP.

garfieldtech.com
1
85
Steal My Bitcoin challenge falls to PHP2Shell, PoC published github.com/KillaBoi/StealMyB…
GitHub - KillaBoi/StealMyBitcoin-PoC: A public release of the Steal My Bitcoin challenge

GitHub - KillaBoi/StealMyBitcoin-PoC: A public release of the Steal My Bitcoin challenge

A public release of the Steal My Bitcoin challenge - KillaBoi/StealMyBitcoin-PoC

github.com
1
278
International PHP Conference Munich 2026 starts tomorrow. phpnews.net/events/internati…
International PHP Conference Munich 2026

International PHP Conference Munich 2026

The International PHP Conference runs October 26 to 30, 2026 in Munich with eight tracks, two workshop days, and early bird pricing until August 20.

phpnews.net
1
134
The "Direction Aware Property Resolution" RFC is implemented for PHP 8.6. phpnews.net/rfcs/direction_a…
PHP RFC: Asymmetric Visibility: Faster Property Reads and Writes

PHP RFC: Asymmetric Visibility: Faster Property Reads and Writes

Speeds up asymmetric visibility by resolving read and write access separately instead of re-checking on every write.

phpnews.net
2
233
The php2shell Scare Showed How Much Runs on PHP phpnews.net/php2shell-php-re…
The php2shell Scare Showed How Much Runs on PHP

The php2shell Scare Showed How Much Runs on PHP

The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it.

phpnews.net
1
136
PHP Warns of Another Session Upload Progress RCE Path phpnews.net/php-session-uplo…
PHP Warns of Another Session Upload Progress RCE Path

PHP Warns of Another Session Upload Progress RCE Path

The PHP security team says to set session.upload_progress.enabled=0 until the next bugfix release to block a rare RCE path, CVE-2026-115560.

phpnews.net
3
13
2
35
15,084
Chainguard Broke the php2shell Embargo phpnews.net/chainguard-php2s…
Chainguard Broke the php2shell Embargo

Chainguard Broke the php2shell Embargo

Chainguard CEO Dan Lorenc says exploit reports justified shipping PHP RCE fixes before the embargo lifted. The reports don't hold up, and it was the wrong call.

phpnews.net
2
5
3
33
14,555
The "IntlRelativeDateTimeFormatter" RFC is implemented for PHP 8.7. phpnews.net/rfcs/reldateform…
PHP RFC: IntlRelativeDateTimeFormatter: "3 Days Ago" in Any Locale

PHP RFC: IntlRelativeDateTimeFormatter: "3 Days Ago" in Any Locale

Adds IntlRelativeDateTimeFormatter for localized strings like "3 days ago" and "next Sunday".

phpnews.net
1
1
211
PHP 8.6.0RC4 is out for testing. PHP 8.6 is planned for November 19, 2026. phpnews.net/php-versions/8.6
PHP 8.6 Release Date and Support Timeline

PHP 8.6 Release Date and Support Timeline

PHP 8.6 is planned for release on November 19, 2026. Its support dates are set once it ships.

phpnews.net
1
1
83
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 are out, with security fixes. Time to update. phpnews.net/php-versions
PHP Version Checker: Is My PHP Version Still Supported?

PHP Version Checker: Is My PHP Version Still Supported?

Check any PHP version, like 8.2.14, or paste your php -v output. See if it still gets fixes, how many releases behind it is and which security fixes it is missing.

phpnews.net
1
2
98
There isn't an easy exploit for this PHP vulnerability eliastaylor.com/noexploit/

There isn't an easy exploit for this PHP vulnerability

Mass hysteria, or something.

eliastaylor.com
1
88
Load more