|
PHP |
News |
|
|
Oct 27 - Nov 3, 2026
|
|
Thanks to our partner
|
|
|
|
In this issue
|
-
Psalm 7 Turns On Security Analysis by Default
-
Cooldown Policies for New Package Versions in Composer 2.11
-
PHP 8.2 End of Life: Plan Your Upgrade Before Dec 31
-
Cloudflare Opens a PHP CTF to Test Its php2shell WAF Rules
|
|
11 community links · 2 RFC votes open · 1 RFC decided · 1 new RFC · 3 upcoming events
|
|
|
Developer Tools
|
|
|
Psalm 7 runs taint analysis by default, replaces its old purity annotations with capabilities, and requires 64-bit PHP 8.2 through 8.6.
|
|
|
More this week
|
|
Developer Tools
Composer 2.11 can hold back newly published package versions for a period you set. It also ships nine security fixes and removes t...
|
|
|
|
|
|
PHP Core
PHP 8.2 security support ends December 31, 2026. See the support dates for 8.3 through 8.5, how to pick a target, and a checklist...
|
|
|
|
|
|
Developer Tools
Cloudflare put a vulnerable PHP 8.5.11 server behind its WAF and invites HackerOne researchers to bypass the php2shell rules and c...
|
|
|
|
|
RFC Watch
|
|
Voting now
2 yes, 16 no. Voting closes November 4.
|
|
|
|
Voting now
10 yes, 0 no. Voting closes November 16.
|
|
|
|
Accepted
27 yes, 1 no.
|
|
|
|
New proposal
Adds PASSWORD_BCRYPT_WRAP, a bcrypt algorithm that prehashes passwords with cSHAKE256 or HMAC-SHA512 to get past bcrypt's 72-byte and null-byte limits.
|
|
|
|
Follow every RFC on the tracker →
|
|
|
|
|
|
PHP News
Independent coverage of the PHP language, its ecosystem and the people building it.
Written by PHP developers, for PHP developers
|