In this second excerpt from Advanced PHP Programming, George Schlossnagle offers advice on how to defend against both attacks and carelessness.

Impacted are PHP-based websites running a vulnerable version of the web-app creation tool Zend Framework and some Laminas Project releases.

The Month of PHP Bugs is backed by the Hardened-PHP Project, which was launched by three German security researchers in 2004. "You should consider the Month of PHP Bugs a result report for just ...

Nasty bug with very simple exploit hits PHP just in time for the weekend With PoC code available and active Internet scans, speed is of the essence.

This leak — the so-called “Cloudbleed” bug — appears to be the latest in a growing list of Internet nightmare scenarios, and is reportedly based around a coding vulnerability turned data ...

CVE-2019-11043 is trivial to exploit — and a proof of concept is available. A buffer underflow bug in PHP could allow remote code-execution (RCE) on targeted NGINX servers. First discovered ...

As promised last year the initiative ‘Month of PHP bugs’ began on March 1st. Whereas previous efforts in the same vein — month of bugs for Mac, browsers and kernels — were new bugs, this ...

The report also highlights bug severity, with Claude Sonnet 4, the highest-scoring model on functional benchmarks, producing nearly double the proportion of BLOCKER bugs compared to its ...