PHP Core Security Audit Results
moebrowne | 136 points
Mainly I want to say thank you. An incredible amount of work and dedication has gone into php over a very long period of time. The php community has managed to reinvent php several times, mainly just to make the language better. May they continue with their great success.
sgc | 4 days ago
I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?
chris_wot | 4 days ago
This is good for php community.
avkpatel | 4 days ago
Huge shout-out to the PHP Foundation for this.
Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding.
Some of the recent initiatives from the Foundation (https://thephp.foundation/blog/2025/03/31/transparency-and-i...) :
- All PHP versions now receive a total of 4 years of security updates; 2 bug fixes + 2 security, up from 3.
- PIE: A replacement for PECL, to easily install PHP extensions (C, C++ compiled, not PHP packages).
- The security audit.
(I'm one of the PHP Core team and a volunteer at the foundation, happy to answer any questions, but almost all of the work is public)