The PHP Foundation

The PHP Foundation

@thephpf.bsky.social

We support, advance, and develop the PHP Language. thephp.foundation

1.7K followers0 following65 posts

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

Cryptography SIG update: we're taking a more informal approach. The Strategy Document we posted earlier this year laid out plans for a Cryptography Special Interest Group. This SIG was meant to be a space to discuss post-quantum cryptography readiness and what it means for the future of PHP.

View full thread

So instead, we're pointing interested folks to the Foundation channel on the PHPC Discord. If PQC readiness in PHP is on your mind, this is the place to come talk about it. We'd genuinely like to hear where you think the priorities are.

Cryptography SIG update: we're taking a more informal approach. The Strategy Document we posted earlier this year laid out plans for a Cryptography Special Interest Group. This SIG was meant to be a space to discuss post-quantum cryptography readiness and what it means for the future of PHP.

We didn't see enough interest from the community to sustain a formal group, and launching and sustaining a SIG carries real administrative overhead. Rather than force the structure, we decided to keep the conversation informal (which is probably where a topic like this starts anyway).

As @pronskiy.bsky.social's term on The PHP Foundation Board comes to an end, he is replaced by the wonderful @stitcher.io. elcome Brent! πŸš€ And thank you for your years of dedication and commitment to The PHP Foundation, Roman! ❀️🐘 thephp.foundation/blog/2026/0... #php

thephp.foundationRoman Pronskiy Leaves The PHP Foundation Board and Brent Roose JoinsAnnouncement about the replacement of Roman Pronskiy with Brent Roose to the Foundation Board.

Welcome TYPO3 as a Silver Sponsor! PHP has been the foundation of TYPO3 for 20 years, & through their support, TYPO3 helps strengthen the security, stability, & continued development of PHP. We also welcome TYPO3’s perspective on the Advisory Board!

Building a more accessible PHP ecosystem is something we care a great deal about. We are honored to share this post from guest blogger @menelion.bsky.social about being a visually impaired PHP developer, learning and coding in PHP. πŸ’™ #php #accessibility #phpc thephp.foundation/blog/2026/06...

thephp.foundationPHP Through a Screen Reader: Small Syntax Choices That MatterThe PHP Foundation β€” Supporting, Advancing, and Developing the PHP Language

In case you missed it, we launched our first State of PHP survey together with @phpstorm.jetbrains.com (a JetBrains IDE.) This initiative aims to build a clearer picture of today’s PHP ecosystem. Take the survey and help us map the herd! πŸ‘‰ thephp.foundation/blog/2026/06... #StateOfPHP #phpcommunity

thephp.foundationHelp Shape the Future of PHP: Take the State of PHP SurveyThe PHP Foundation β€” Supporting, Advancing, and Developing the PHP Language

Are you able to join us at #PHPverse on June 9? Join our Executive Director & keynoter Elizabeth Barron, along with a fantastic lineup of expert speakers (including Board member @naderman.de). A free virtual event that you won't want to miss! thephp.foundation/blog/2026/05... #php #phpverse2026

thephp.foundationThe PHP Foundation’s Elizabeth Barron to keynote JetBrains PHPverse 2026The PHP Foundation β€” Supporting, Advancing, and Developing the PHP Language

Announcing the Ecosystem Security Team at The PHP Foundation! Thanks to a grant from Alpha-Omega at @linuxfoundation.org, this effort will improve security across the entire PHP ecosystem. The amazing @edorian.bsky.social will be filling this role.✨ thephp.foundation/blog/2026/05... #php #security

thephp.foundationAnnouncing the Ecosystem Security Team at The PHP FoundationThe PHP Foundation β€” Supporting, Advancing, and Developing the PHP Language

The PHP Foundation reposted

Open infrastructure isn't free. 🌱 Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries. #php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability

OpenSSF@openssf.org

Open Infrastructure Is Not Free Part II 10 trillion open source package downloads in 2026. Still running on donations and volunteers. AI is accelerating attacks. The Sustaining Package Registries WG is here to help. openssf.org/blog/2026/05... #PreserveOpenSource

Our Executive Director, Elizabeth Barron, has been listening to your feedback about the PHP ecosystem to help inform The PHP Foundation's 2026-2027 strategy. She shares what she's learned in our latest blog post. Exciting opportunities await! ✨ πŸš€ thephp.foundation/blog/2026/04... #php #phpcommunity

thephp.foundationIntegrating Community Feedback into Foundation Strategy Part 1The PHP Foundation β€” Supporting, Advancing, and Developing the PHP Language