Pinned Tweet
The biggest myth in web development: “PHP is slow.”
What’s actually slow:
• Oversold shared hosting
• Misconfigured Apache
• No OPcache or caching layers
Blaming PHP is just easier than fixing the server.
#php #laravel #javascript #apache
What’s actually slow:
• Oversold shared hosting
• Misconfigured Apache
• No OPcache or caching layers
Blaming PHP is just easier than fixing the server.
#php #laravel #javascript #apache
0
0
3
77
Sushil Kumar 🍀 retweeted
phprust.com
Yet another #compiled #PHP implementation. This time written in Rust. At first glance, the project looks pretty promising. So, has the future finally arrived? :)
Yet another #compiled #PHP implementation. This time written in Rust. At first glance, the project looks pretty promising. So, has the future finally arrived? :)
18
25
160
18,882
Sushil Kumar 🍀 retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
86
875
5,392
753,193
Sushil Kumar 🍀 retweeted
If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.
14
151
996
555,942
🚨 Critical PHP RCE Alert (CVE-2026-109618/19)!
Affecting PHP 5 through 8, official patches dropped today, October 21 at 14:00 UTC, for PHP 8.2, 8.3, 8.4, and 8.5.
CVSS 9.2. If you're on older unsupported versions, patch or isolate apps immediately! 🛠️🔒
#CyberSecurity #PHP
Affecting PHP 5 through 8, official patches dropped today, October 21 at 14:00 UTC, for PHP 8.2, 8.3, 8.4, and 8.5.
CVSS 9.2. If you're on older unsupported versions, patch or isolate apps immediately! 🛠️🔒
#CyberSecurity #PHP
0
0
0
180
Sushil Kumar 🍀 retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
18
77
519
99,827
Sushil Kumar 🍀 retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.p….
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
55
326
1,734
136,414
Sushil Kumar 🍀 retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
346
4,178
18,606
7,054,357
Use my two packages achieved asynchronous http request & response (non-blocking I/O), like javascript but use MySQL objects not PDO and we have alternative Idea going with Fast-route and React php Promise library.
1
0
2
52
Sushil Kumar 🍀 retweeted
In just 7 months we've 10x'd our total installs of nativephp/mobile compared to all of 2025
We're on track for +1,000% yoy 🤯
Confident that we'll 10x again by this time next year
🚂 💨
We're on track for +1,000% yoy 🤯
Confident that we'll 10x again by this time next year
🚂 💨
1
5
23
847
Sushil Kumar 🍀 retweeted
PHPStan: 60 seconds
Mago (Rust): 3 seconds
I thought it was AI slop. Then I went down the rabbit hole... and ended up learning Go 😅
Is PHP becoming a "Rusty" language? 👇
tomasvotruba.com/blog/is-php-a-…
Mago (Rust): 3 seconds
I thought it was AI slop. Then I went down the rabbit hole... and ended up learning Go 😅
Is PHP becoming a "Rusty" language? 👇
tomasvotruba.com/blog/is-php-a-…
6
7
99
8,225
Sushil Kumar 🍀 retweeted
Over 2000 people have joined /dev/null in less than 48 hours. Here are my takeaways: dev-null.sh/@brendt/commit…
8
11
125
9,345
dear @taylorotwell, @naderman @fabpot, we are the php community, and right now we building a social media that uses the best language in the world: PHP
here is the link: dev-null.sh
we would mean the world, the stars, the planet, and everything in the between if you could join us
(@taylorotwell sign-in takes less than 5 seconds, so please come on)
0
1
3
494
Sushil Kumar 🍀 retweeted
dear @taylorotwell, @naderman @fabpot, we are the php community, and right now we building a social media that uses the best language in the world: PHP
here is the link: dev-null.sh
we would mean the world, the stars, the planet, and everything in the between if you could join us
(@taylorotwell sign-in takes less than 5 seconds, so please come on)
here is the link: dev-null.sh
we would mean the world, the stars, the planet, and everything in the between if you could join us
(@taylorotwell sign-in takes less than 5 seconds, so please come on)
27
65
372
29,154
Sushil Kumar 🍀 retweeted
In our latest blog post, @alexdaubois shares how the PHP Security Team operates, how your security reports are triaged, and how you can do your part to help PHP be more secure. thephp.foundation/blog/2026/10/1…
#phpc #security
#phpc #security
0
11
43
16,476