Post

This has been an extraordinarily rare and severe exploit, the last bug this severe that I can recall was Heartbleed back in 2014 with OpenSSL, a fantastic open-source library we still use and depend on today. So yeah, "php funni", but also remember the hard work devs do to maintain the internet.

Also: Open source does not mean insecure. On the contrary, allowing people to inspect your code and perform independent auditing is a fantastic thing. Security through obscurity is a fallacy, hiding your code does not prevent decompilation or reverse engineering, it only slows down bad actors.