PHP Community

For the Forge users, I've just published Update #5 to my post about the PHP CVEs thanks to Kath Young. The Forge API includes an endpoint for pushing patches for PHP versions: laravel.com/forge/docs/a... securinglaravel.com/laravel-secu...

And it's up! www.php.net github.com/php/php-src/... github.com/php/php-src/... I don't think the Ubuntu repos are updated yet, but they shouldn't be too far away.

This is the #PHP exploit, in the Wall Street Journal: AI Just Found a Bug That Puts Up to 70% of the World’s Websites at Risk https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea

Hugs and headpats to all the #PHP release managers today! Upgrade your PHP at 14:00 UTC today! https://www.php.net/archive/2026.php#2026-10-20-1

This year we're excited to live stream our keynote sessions, free to everyone! Join us at buff.ly/AkQw7se tomorrow (Friday, Oct 16th) at 9am and 5pm (CDT) Virtual tickets for Friday are still available, including recordings after the conference! buff.ly/pT8zS2c

If you've wanted to contribute to PHP but weren't sure exactly where to start, Foundation Board member @mattstauffer.com has compiled a list of places where you can contribute with your specific skillset. thephp.foundation/blog/2026/0... #php #opensource

This mornings talk at #fossy by Elizabeth Barron (the exec dir of the @ThePHPF ) on the challenges in sustaining php was awesome. Go donate to the foundation so we can all keep writing code for fun and profit! opencollective.com/phpfoundation

This Week in PHP Internals, Aug 12: the 35-ballot deprecation verdict — list() survives on a flat tie. Pipe assignment declined; readonly defaults + const writes in; 8.6's RFC season is over. https://youtu.be/6zepFnDTU1A #PHP #PHPInternals

If you want to help newcomers to the PHP language, our latest Special Interest Group might be just the thing for you. Announcing the PHP Onboarding Initiative! thephp.foundation/blog/2026/0... #php #newcomerexperience #mentorship

Curious about the PHP Ambassador Program we started a few weeks ago? We posted a progress update on our blog today. Exciting things are happening and you can be a part of the movement! Read more: thephp.foundation/blog/2026/0... #php #phpc #phpambassadors

The open source world never stands still. Technologies evolve, best practices change, and the skills that matter today may look different tomorrow. Join @volkswagenchick.bsky.social for "Certify Your Curiosity: How to Keep Learning in the Open Source World". Get your ticket at longhornphp.com

Ever faced a heavy task & thought maybe PHP isn't the right tool? Join Florian Engelhardt for "Parallel Futures: Unlocking Multithreading in PHP" to tackle demanding tasks, scale applications, & unlock performance you didn’t think possible. Tickets: longhornphp.com

First talk at #FOSSY is Daniel Scherzer’s “From First PR to Release Manager: A Path into Open Source,” his own story about contributing to #PHP as a release manager.

While PHP core comes with some nice functionality, the real power in PHP is found in extensions. Join Daniel Scherzer for "Creating new PHP extensions" for a hands-on tutorial! Grab a ticket at longhornphp.com

I'll be presenting at @longhorn in two months! It'll be my first speaking engagement in two years, and my (long-overdue) first visit to the conference. Tickets remain on discount until the end of the week if you'd like to join us. Looking forward to meeting even more of the #PHP community! […]

We're also excited to have Gunnard Engebreth presenting "AI-Powered PHP Development in Practice": A hands-on workshop walking through the full AI-assisted development loop, with a real PHP project, including catching AI hallucinations before they ship. longhornphp.com

I’m really honored to be among the speakers selected to speak at this year’s @longhorn PHP Conference. I hope you’ll join me there! https://longhornphp.com #PHP #LonghornPHP

This week in PHP internals: the 35-ballot deprecation vote enters its final week with list() deadlocked 21-21, a second author pulled his own vote over process rules, and PHP 8.6 officially gets a Duration class. Full rundown: https://youtu.be/8YUc-A2h-f4 #PHP #PHPInternals

I'm speaking at Longhorn PHP in Austin this October! "How Tetris Made Me a Better Programmer" — the falling-blocks game has a real 60-page spec, I built it in PHP, and it taught me plenty about state machines and specs. Blind Bird pricing through Aug 8: https://longhornphp.com/schedule #PHP

Howdy folks! In case you missed it, our schedule is live! Check out all the speakers & talks - and if you hurry, you can still get blind bird pricing! We have a great lineup this year: 20 amazing speakers, 3 workshop tracks Thurs & 3 talk tracks Fri. longhornphp.com/schedule

Feature freeze for #PHP 8.6 is on the horizon, and you know what that means? It’s time for Brent Roose’s “What’s New in PHP?” blog post. stitcher.io/blog/new-in-...

Composer & Packagist now have a sponsorship program. Thank you to our launch sponsors 🤝 Aikido, AWS, Socket, Bunny, Upsun, Sonatype, Tideways, Datadog and Algolia help fund our shared infrastructure. blog.packagist.com/announcing-... #php #phpc #composerphp

🧵 This Week in PHP Internals — Jul 15, 2026 A brand-new `extension` keyword rewrote itself mid-thread, deprecations froze with ballots set, autoloading split in two, Duration drew its first No, and a JSX-style RFC landed hours before recording. Full video 👇 youtu.be/cGNa33qGqEg #PHP #PHPInternals

Enthusiasm for contributing to #PHP often fizzles out before it has a chance to catch fire. I've proposed a Working Groups RFC to change that. Here's the case for it and how you can help shape it. https://ben.ramsey.dev/blog/2026/07/who-do-i-talk-to

It's time to talk about the future. If you're not a #php developer, why not have a brief history lesson, then look at the recent innovations that the entire community has created? @thephpf.bsky.social www.youtube.com/watch?v=fc9b...

Your AI agent hallucinates a package name, confidently installs it, and keeps working - except an attacker registered that exact name, packed with malware. Welcome to slopsquatting. securinglaravel.com/security-tip... #Laravel

Welcome TYPO3 as a Silver Sponsor! PHP has been the foundation of TYPO3 for 20 years, & through their support, TYPO3 helps strengthen the security, stability, & continued development of PHP. We also welcome TYPO3’s perspective on the Advisory Board!

There are at least 3 #PHP-related talks at #FOSSY this year! ⁃ “From First PR to Release Manager: A Path into Open Source,” Daniel Scherzer ⁃ “The PHP Foundation and The Challenge of Sustaining Critical Digital Infrastructure,” @elizabeth ⁃ “It Was BSD All Along: Relicensing PHP After 30 Years […]

In our latest blog post, Foundation contractor Shivam Mathur digs into the details and importance of providing support for PHP builds on Windows. 🚀 thephp.foundation/blog/2026/0... #php #phpc #windows

@phpc.social I'm looking for a site I discovered a while back for learning PHP. Written by an individual, it explained the Why of PHP, building on HTML, kind of like progressive enhancement. Simple, black and white design, I think. Any ideas?

You can now join the PHP Ambassador Program if you want to help improve the perception of PHP in spaces outside our bubble. Help us help the community tell the real story of modern PHP development! #php #phpc Read more: thephp.foundation/blog/2026/0...

Well #PHPVerse was actually pretty good. Learned a fair bit about @thephpf.bsky.social and the various talks I was able to catch between work meetings were very interesting. @jetbrains.com

Announced at #PHPverse: @thephpf launches its first annual State of PHP survey. Go participate in the survey to help shape the future of PHP. https://thephp.foundation/blog/2026/06/09/help-shape-the-future-of-php/ #PHP

Shout out to all of the financial supporters of @thephpf! #PHP #PHPverse #ThePHPF

Great conferences are about the conversations, connections, & shared experiences along the way. 🤝 It's exciting to see Mike Herchel, representing #Drupal at #PHPVerse, engaging with the wider #OpenSource ecosystem and building connections that strengthen us all. 💙 Photo credits: Mike Herchel

Composer and Packagist need business sponsors to sustain themselves. There are also other actions we, individuals, can take to help. #PHPverse

Check it! #PHPverse is back June 9 with speakers @jeffreyway.bsky.social, Larry Garfield, @fabien.potencier.org, @jonathanbossenger.com, @naderman.de, @elizabeth-barron.bsky.social, & @ashleyhindle.com. Hosts @nunomaduro.com & @stitcher.io. It’s online & free! lp.jetbrains.com/phpverse-2026/ #PHP

Check it! #PHPverse is back June 9 with speakers @jeffreyway.bsky.social, Larry Garfield, @fabien.potencier.org, @jonathanbossenger.com, @naderman.de, @elizabeth-barron.bsky.social, & @ashleyhindle.com. Hosts @nunomaduro.com & @stitcher.io. It’s online & free! lp.jetbrains.com/phpverse-2026/ #PHP

Are you able to join us at #PHPverse on June 9? Join our Executive Director & keynoter Elizabeth Barron, along with a fantastic lineup of expert speakers (including Board member @naderman.de). A free virtual event that you won't want to miss! thephp.foundation/blog/2026/05... #php #phpverse2026

The PHP Community Discord server now has a channel serving as a collaborative space for security-focused individuals across the PHP ecosystem to share tooling, practices, and learnings. Check out the # ecosystem-security channel at discord.phpc.social #PHP #security

Oh, and if you weren’t aware, here’s your regular reminder that there’s a print and digital magazine for PHP. Check it out at https://www.phparch.com, and subscribe to the podcast. @phparch #PHP

Thanks so much to @eric, @john, and the rest of the @phparch crew for putting on yet another great #PHPTek! I enjoyed giving my talks, learned some new things, caught up with old friends and made new ones, and had a blast. See you next time!

Thank you so much for having me #PHPTek @phparch.com! First talk in the USA for me, and I'm getting back in September in San Francisco 🇺🇸 Had a blast to talk about #FrankenPHP, cybersecurity and meeting people from @thephpf.bsky.social and the ecosystem 🐘💜

Announcing the Ecosystem Security Team at The PHP Foundation! Thanks to a grant from Alpha-Omega at @linuxfoundation.org, this effort will improve security across the entire PHP ecosystem. The amazing @edorian.bsky.social will be filling this role.✨ thephp.foundation/blog/2026/05... #php #security

Unfortunately, we haven't figured out how to read minds (yet). Show us what parts of Tek make your camera roll! Tag @phparch.com in your posts this week and help us see Tek through your eyes! 📷 📸 📷

Good morning, #PHPTek!

Only one week until Tek starts! Travel is booked, checklists are made, and posts are queued. We can't wait to see you there! Can't join us in person? Pick up tickets to the conference stream at phptek.io

🪰 Did you know fruit flies are used in biology labs to demonstrate mutations over generations? 🪰 Whether or not that has anything to do with contributor Jim Seconde's article on PEST mutation testing is for you to find out in our April magazine. www.phparch.com/maga...

8️⃣ days until Tek! Have you started scouting out where you're gonna visit between talks? phptek.io (Share your Chicago recs with us below-- some of us haven't been before.)

#Shodan shows you every exposed port on the internet. Takes less than five seconds. A forgotten port plus a zero-day is a bad day. I've been closing anything I don't actively use. Less exposed, less to monitor. #php #phpc #coding #podcast #phptek #jstek #cybersecurity #hacking #infosec #tech