I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
PHP Core Security Audit Results
11–20 of 72 posts
Re: PHP Core Security Audit Results
#12Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…
Re: PHP Core Security Audit Results
#13Earlier quoted context omitted.
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…
Why does Laravel have a dude with a Hawaiian shirt, though? Heh
Re: PHP Core Security Audit Results
#14Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…
>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…
Re: PHP Core Security Audit Results
#15I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
- Type annotations are integrated and work well with PHP now. This results in a kind of scripty Java OOP that is more succinct and type checked ! (it is possible to write PHP without types when you want metaprogramming features also)
- Many inconsistencies in the design of the language (OOP, function naming etc.) have been resolved/smoothed out
- The language recognises the inherent problems with `null` and allows you to make type annotations that rule out null. This is my smell test for a language BTW -- golang for instance does not seem to have a good story for null.
- PHP Language developers have been really good about increasing performance year after year
- Lots of software like web frameworks and CMSes continue to be based on PHP
And -- the greatest part of the design -- PHP remains the best example of the "shared nothing" architecture. An architecture that allows you to scale your application easily.
Re: PHP Core Security Audit Results
#16I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
The reason is simple: It's to me the most efficient, best performant SSR option out there, if your requirements are simple.
You will be amazed at the website's speed. We are so used to the lethargic JS slop of the average website out there these days.
I love PHP, I believe future "vibe coders" will be left bedazzled at its powers, which will be beyond their comprehension.
Re: PHP Core Security Audit Results
#17I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
It has a low barrier to entry and great language features - static typing being one of the big ones. It has become a really nice language over the years, great to work in and in no way less satisfying or effective than for example golang.
And, of course, laravel exists.
Re: PHP Core Security Audit Results
#18I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?