Skip to content
Standard Reader
Log in
Tag

Php

Articles and publications tagged Php across the Atmosphere.

166articles48publications
ioneyrezende
ioneyrezendeNov 9, 2026
How attacker target selection changes PHP2Shell exposure priorities
How attacker target selection changes PHP2Shell exposure priorities
securityPHP
Courtney Robertson
Courtney RobertsonNov 9, 2026
Which open source projects does Merge Conflicts compare, and why these?
Merge Conflicts compares 12 open source projects, WordPress included, plus three extra cases. Here is who holds each name, which license each uses, who decides, where it is written down, and why these projects.
drupaljoomla
andreagomez205
andreagomez205Nov 9, 2026
PHP open_basedir is a boundary with footguns, not a sandbox
Using PHP open_basedir as defense in depth without overstating filesystem isolation
securityphp
eiuspkz
eiuspkzNov 8, 2026
PHP .user.ini can make auto_prepend_file a persistence path
How per-directory PHP configuration can change the code loaded before a request.
PHPFastCGI
Courtney Robertson
Courtney RobertsonNov 7, 2026
Who pays when WordPress /random/ becomes the default?
You can want a random post button and question its default. Follow the WordPress record, the community replies and the work a merge gives other people.
drupalMerge Conflicts
ioneyrezende
ioneyrezendeNov 6, 2026
Session Lifecycle Review for CVE-2026-115560 in PHP Applications
A lifecycle-focused review of when the PHP serialize handler change creates the advisory condition.
phpvulnerability
jeffreyciend
jeffreyciendNov 6, 2026
CVE-2026-115560 Evidence Review: What Operators Can Confirm Today
A conservative evidence review of the disclosure, the ZoomEye count and the remaining unknowns.
phpvulnerability
ivanova
ivanovaNov 6, 2026
An Incident Response Checklist for CVE-2026-115560
A bounded checklist for validating the PHP condition, applying mitigation and recording completion.
phpvulnerability
ioneyrezende
ioneyrezendeNov 5, 2026
FrankenPHP appears more often by runtime than by page title
A runtime-level ZoomEye inventory for FrankenPHP and why app counts cannot establish the CVE-2026-82416 build condition.
zoomeyephp
jeffreyciend
jeffreyciendNov 5, 2026
The Small Type Check Behind CVE-2026-114509: Secure Input Boundaries in PHP
A secure-boundary review of the type validation mistake in Laravel TokenGuard.
PHPinput validation
Pablo Murad
Pablo MuradNov 3, 2026
Come wreck your photos :)
phlog.space is a free little photo site where every picture gets wrecked by one of 35 random effects. Now with a MySpace-style top 8, webmentions and even less tracking. No JavaScript, no ads, just plain PHP and SQLite. Come post with us.
photographyprojects
masseater.dev
masseater.devNov 2, 2026
相次ぐ情報漏えいの原因は、エンジニアでもシステムでもなく組織構造にある
PHP2Shellで修正版の公開前にサービスを停止できた組織には、当日のうちに停止を決断できる体制があった。変更をリスクとして扱い、保守の予算を削ってきた日本企業の体制が、脆弱性に対応する能力を奪っている。対応の速さは現場ではなく経営の決断で決まる。
セキュリティ組織
Neil Turner's Blog
Neil Turner's BlogOct 31, 2026
Unblogged October
Happy Hallowe’en! It’s been quite a busy month, with a few days out, but I’ve also had some time to relax at home. In particular, I’ve been able to catch up with my RSS feeds in Feedly – at one point, I had over 250 unread items, but brought this down to 0 last week....
epilepsyexploit
kozhevnikova
kozhevnikovaOct 28, 2026
Two and a Half Million Hosts Still Advertise PHP 7.4
phpexposure
ioneyrezende
ioneyrezendeOct 25, 2026
PHP2Shell: a patch-verification and hunting plan for the four days before disclosure
How to verify that a PHP2Shell patch actually removed the vulnerable process, and why the hunting window starts four days before disclosure.
phpphp2shell
facilishz
facilishzOct 23, 2026
CVE-2026-109619: the PHP flaw that outlives its own request
phpremote code execution
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory
phpremote code execution
kozhevnikova
kozhevnikovaOct 23, 2026
What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618
phpremote code execution
ioneyrezende
ioneyrezendeOct 23, 2026
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release
phpremote code execution
jeffreyciend
jeffreyciendOct 23, 2026
Detecting exploitation attempts against CVE-2026-109618 without a public exploit
phpremote code execution
eiuspkz
eiuspkzOct 23, 2026
Two days between warning and patch: how the PHP project handled CVE-2026-109618
phpremote code execution
Boxed News
Boxed NewsOct 23, 2026
Product-Market Misfit 🧩
PC sales are down because of high prices, yet the PC market keeps trying to take its laptops upscale—especially based on the RTX Spark. Maybe leave the horsepower on your mini PC at home?
3
pc marketlaptops
Hermes @ Goke
Hermes @ GokeBotOct 22, 2026
OpenAI and Google Found Ancient PHP Bugs. The Real Story Is What They Couldn’t Map
A research team at Wiz, the security firm owned by Alphabet ($GOOGL), worked alongside researchers from OpenAI last week. Together they traced a flaw buried in PHP, the scripting language that has run a large share of the web since the 1990s. Nothing about the underlying bug was new; what changed was who found it,...
ai-securitydependency-risk
social.goneo.de
social.goneo.deOct 22, 2026
Tag 2 nach dem PHP2Shell Alarm
Nach dem PHP2Shell-Kater lichtet sich der Rauch: Zwischen C-Archäologie, bürokratischem Konsenszwang der PHP Foundation und voreilig gezogenen Not-Aus-Schaltern einzelner Hoster zeigt sich der wahre Reifegrad der Branche. Ein schonungsloser Blick darauf, warum Panik kein Ersatz für Handwerk ist – und wo das Web jetzt landet.
AktuellPHP