Update PHP now

Written on 2026-10-21

The worst security vulnerability in PHP's history has just been announced. Technically it was leaked yesterday but I figured it would only make sense to write about it as soon as the patch for it is live.

tl;dr: every PHP website in the world is vulnerable for a remote code execution attack, and you should update your websites NOW. The fixed versions are:

8.5.12
8.4.27
8.3.36
8.2.35

Any other version is affected, including unsupported versions older than PHP 8.2. You can read the in-depth report here.

Things I wish I knew when I started programming

This is my newest book aimed at programmers of any skill level. This book isn't about patterns, principles, or best practices; there's actually barely any code in it. It's about the many things I've learned along the way being a professional programmer, and about the many, many mistakes I made along that way as well. It's what I wish someone would have told me years ago, and I hope it might inspire you.

stitcher.io

Update PHP now

Things I wish I knew when I started programming

Comments