PHP Core Security Audit Results
thephp.foundation
PHP Core Security Audit Results
1–10 of 72 posts
Re: PHP Core Security Audit Results
#2Mainly I want to say thank you. An incredible amount of work and dedication has gone into php over a very long period of time. The php community has managed to reinvent php several times, mainly just to make the language better. May they continue with their great success.
Re: PHP Core Security Audit Results
#3Mainly I want to say thank you. An incredible amount of work and dedication has gone into php over a very long period of time. The php community has managed to reinvent php several times, mainly just to make the language better. May they continue with their great success.
It's also important to understand how all these are achieved with so little ($683k donated in 2024) Considering how much php code is out there the budget php foundation has at its disposal is very small. I wished more companies sponsored.
Re: PHP Core Security Audit Results
#4Huge shout-out to the PHP Foundation for this.
Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding.
Some of the recent initiatives from the Foundation (https://thephp.foundation/blog/2025/03/31/transparency-and-i...) :
- All PHP versions now receive a total of 4 years of security updates; 2 bug fixes + 2 security, up from 3.
- PIE: A replacement for PECL, to easily install PHP extensions (C, C++ compiled, not PHP packages).
- The security audit.
(I'm one of the PHP Core team and a volunteer at the foundation, happy to answer any questions, but almost all of the work is public)
Re: PHP Core Security Audit Results
#5Mainly I want to say thank you. An incredible amount of work and dedication has gone into php over a very long period of time. The php community has managed to reinvent php several times, mainly just to make the language better. May they continue with their great success.
It's also important to understand how all these are achieved with so little ($683k donated in 2024) Considering how much php code is out there the budget php foundation has at its disposal is very small. I wished more companies sponsored.
I was under the impression that facebook would be more interested into PHP health since I thought they relied on it more. But it seems that my impression was outdated by a decade.
Re: PHP Core Security Audit Results
#6Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding.
Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD
Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor?
Source: https://opencollective.com/phpfoundation/contribute/major-sp...
Re: PHP Core Security Audit Results
#7Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…
Why does Laravel have a dude with a Hawaiian shirt, though? Heh
Re: PHP Core Security Audit Results
#8I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
Re: PHP Core Security Audit Results
#9Earlier quoted context omitted.
It's also important to understand how all these are achieved with so little ($683k donated in 2024) Considering how much php code is out there the budget php foundation has at its disposal is very small. I wished more companies sponsored.
I was under the impression that facebook would be more interested into PHP health since I thought they relied on it more. But it seems that my impression was outdated by a decade.
They moved to Hack many years ago, at some point the languages diverged too much
Re: PHP Core Security Audit Results
#10I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
It's cheap, it's fast, it's simple, and it works everywhere.