Post

If all the govs shutting down servers for a PHP update, all the hosters & enterprises terrified by the vuln, gave $100k, or just $50k a year to the PHP Foundation, things could look very differently. Go, make your employer sponsor *today* thephp.foundation/sponsor/ #php #phpc @thephpf.bsky.social

thephp.foundationSponsor The PHP FoundationThe PHP Foundation — Supporting, Advancing, and Developing the PHP Language

22/10/26, 2:45 pm38 reposts62 likes

Evert Pot

@evertpot.com

What do you think would have gone differently with more money for this particular case?

Nils Adermann

@naderman.de

If the 3 core devs we pay on the sec team had additional help handling other security issues, additional responsibilities on the language, huge amounts of code review, release management, they would have had time to focus on the original issue discovered in '24 and fixed it a while back