Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PHP Core Security Audit Results

thephp.foundation

Post reply on HN
Print view View original

21–30 of 72 posts

Re: PHP Core Security Audit Results

#21

Post by avkpatel »

jdthedisciple wrote: post #16
chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

I legit started a new customer project (simple business website) on PHP a cple days ago: The reason is simple: It's to me the most efficient, best performant SSR option out there, if your requirements are simple. You will be amazed at the website's speed. We are so used to the lethargic JS slop of the average website out there these days. I love PHP, I believe future "vibe coders" will be left bedazzled at its powers…

Did you use any plain PHP or any framework?

Re: PHP Core Security Audit Results

#22

Post by sanswork »

zakki wrote: post #6
Ayesh wrote: post #4

Huge shout-out to the PHP Foundation for this. Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Some of the recent initiatives from the Foundation ( https://thephp.foundation/blog/2025/03/31/transparency-and-i... ) : - All PHP versions now receive a to…

>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…

That's since 2021 not last year.

Re: PHP Core Security Audit Results

#24

Post by sanswork »

davidandgoliath wrote: post #14
zakki wrote: post #6

Earlier quoted context omitted.

>>> Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding. Wow, Automattic itself donated more than half of it: Silver Sponsor $387,500 USD Why many donors with more than USD 24K and USD 100K still listed as Silver sponsor? Source: https://opencollective.com…

Crazy that Automattic only makes 4,843,750 a year (and donates 8% to the PHP foundation).

Automattic has annual revenue of over $700m where did you get that number from?

Re: PHP Core Security Audit Results

#25

Post by makeitdouble »

chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

The real question would be why not ?

Many of the quirks and problematic parts have been addressed through the years, it's battle tested, and there is a healthy and stable ecosystem behind. It doesn't need to be everyone's first choice, but there's also no strong reason to avoid using it in its current state.

Re: PHP Core Security Audit Results

#26

Post by troupo »

chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

It just works out of the box, and request-response model still fits the web better than any other solution out there.

And it's still performant enough https://x.com/arvidkahl/status/1775261978006896730

Re: PHP Core Security Audit Results

#27

Post by ChocolateGod »

sanswork wrote: post #24
davidandgoliath wrote: post #14

Earlier quoted context omitted.

Crazy that Automattic only makes 4,843,750 a year (and donates 8% to the PHP foundation).

Automattic has annual revenue of over $700m where did you get that number from?

"had annual revenue" at this rate given their legal troubles

Re: PHP Core Security Audit Results

#28

Post by davidandgoliath »

sanswork wrote: post #24
davidandgoliath wrote: post #14

Earlier quoted context omitted.

Crazy that Automattic only makes 4,843,750 a year (and donates 8% to the PHP foundation).

Automattic has annual revenue of over $700m where did you get that number from?

Ah, sorry, I assumed they contributed 8% to PHP just like they've asked WP Engine to contribute 8% (of their revenue) to them.
Post reply on HN