@faguo

Code quality fanatic, static analysis expert @exakat, elephpant breeder, husband, father, speaker！https://xitter.cf/t.co/bXYI33RdlH

 The Hague, The Netherlands
exakat.io/
Joined April 2007
  • Tweets5.2K
  • Following1.1K
  • Followers1.5K
552Media
PSA : I'm also available on BluSky bsky.app/profile/dseguy.bsky… and mastodon phpc.social/@dseguy
2
769
A story behind #PHP vulnerabilities from reporter: calif.io/php2shell/

php2shell by Calif Research

A tale of two PHP remote vulnerabilities

calif.io
11
3
43
5,135
TIL that #PHP is a 'Prokaryotic virus Host Predictor', that is a computational tool for host prediction of prokaryotic viruses based on Gaussian Model (GM). That may explain explain some misunderstanding I had in the past...
1
110
And the mandatory "What does #PHP mean" : exakat.io/what-does-php-mean…

What does PHP mean ? - Exakat

What does PHP mean, besides being the name of popular programming language? Discover other usages and fun acronym values.

exakat.io
40
The #php2shell panic got the severity right and most of the details wrong. It's a 9.2, not a 10.0, and the session.upload_progress flag you were told to switch off belongs to the other CVE. I went through the rumors against the advisory and the diff: daubois.dev/blog/cve-2026-10…

What the PHP2Shell rumors got wrong, from inside the PHP security team

The PHP2Shell leak got the severity right and most details wrong: an out-of-memory error turned into RCE, and the real stopgap went unmentioned.

daubois.dev
1
28
3
132
46,457
Couldn't say better than this. The number of wrong info posted all over socials about this topic is pretty unbelievable.
Pauline Vos
@vanamerongen23h
Pro-tip: stop believing any and all bullshit people are posting on here rn. Refer to credible sources like PHP core team members or @ThePHPF.
3
1
25
3,775
Sometimes, I am concerned by the traffic that very old pages still generate on my website. Some posts are actually still valid today, some need some update, but some are definitely obsolete beyond modernisation.
1
92
phplives.dev has a new headline: PHP delivers. PHP lives! "PHP delivers" comes from Damien Seguy. Thanks @faguo!
The phplives.dev share card: "PHP delivers." above a white sticker reading "PHP lives!", with "Real things people shipped with PHP in the last 6 months." and an orange "phplives.dev shipped" stamp, on dark blue.

ALT The phplives.dev share card: "PHP delivers." above a white sticker reading "PHP lives!", with "Real things people shipped with PHP in the last 6 months." and an orange "phplives.dev shipped" stamp, on dark blue.

1
3
71
#PHP and #rustdev are often teaming to deliver features and assess hard problem. Here is a factual inventory of every current bridge between them: Zend extensions, FFI, WebAssembly runtimes, PHP-to-Rust conversion, Rust PHP engines, PHP Rust compiler, code generators, etc. 👇
1
1
4
276
Sad to see tools for AI code reviews often don't support PHP/Laravel. I know why. It's not a "sexy" market to them. But still sad how PHP longtail reputation hurts people like me from having more cool tools. Same how mobile apps are built for iOS first, then (maybe) Android.
9
1
35
4,073
A quick tip/reminder: in #PHP, the year *must* consist of 4 digits ref: php.net/manual/en/datetime.f…
1
1
2
126
I find it refreshing to see that @claudeai still uses #PHP print_r() and error_log() calls to debug code. I'm sure there are more modern solutions though.
3
9
428
One month to go until the Call For Papers for PHPBenelux Conference 2027 closes. 📥 Submit your talks on sessionize.com/phpbenelux-20…
6
5
703
So, @claudeai is storing the local permissions in .claude/settings.local.json and it even warned me about some very wide autorisations that would allow it to do may things. These are gone now. Anyone is reviewing these authorisations? I think I would trust a third party better
1
133
Look at your keyboard, and tell me what is the least used letter of the alphabet when using #PHP? It should be the least eroded key.
1
120
I counted them on native function names, on php-core. case-insensitive, obviously.
44
If you've got some free time this weekend, you should submit an entry to #PHP PHPenomenal. It's a competition to see what folks can come up with using the new features coming in PHP 8.6. Example: github.com/dseguy/phpenomena… Submit a PR to github.com/dseguy/phpenomena…

Stampede - PHP 8.6 Feature Derby by JonPurvis · Pull Request #4 · dseguy/phpenomenal

Summary Stampede is a terminal horse race for the PHPenomenal 8.6 challenge. Each runner is named after a PHP 8.6 feature, and the race engine itself is implemented with those features, so the code...

github.com
1
2
233
Using #PHP ? and graph database @tinkerpop with #Gremlin? Let's connect !
2
1
3
207
Do you still read any Laravel/PHP/web-dev blog articles? 🤔 If so, what types of content are you interested in reading? I'm planning new articles. But I'm mindful of the fact that AI/agents have made my older, existing "How to do X in Y" style tutorials sort of redundant. So I want to see what types of things people are interested in reading about. I want to write articles that you'll enjoy and want to read. Open to all ideas! 😄
10
1
16
1,684
i didn't know this was valid match statement syntax, pretty cool no one programs anymore, but if we did, it would be good to know
19
6
2
176
11,220
#PHP lazy class constant is the default behavior when creating constant with expressions, rather than literal values. This is both clever and a hidden trap. So, let's review that! 👇
A lazy sleeping cat

ALT A lazy sleeping cat

1
1
3
163
Load more