The PHP Foundation

We support, promote, and advance the PHP language. 💜🐘
#ThePHPFoundation

Website: https://thephp.foundation

Last Notes

2026-10-23 10:36:46 UTC

Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 on Wednesday, keep it disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected.
Information advisory on PHP website by the PHP security team: https://www.php.net/archive/2026.php#2026-10-23-1
#php #phpc

2026-10-21 14:51:24 UTC

We have posted more information about today's security releases, including the sequence of events that led to the discovery, how the PHP security team is improving their processes, and what we need from you to continue this critical work. https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
#php #security

2026-10-20 19:50:53 UTC

The PHP security team is giving advance notice of an upcoming security release scheduled for Wednesday, 21 October 2026 at 14:00 UTC, addresses two critical vulnerabilities, both rated CVSSv4 9.2.
All PHP users are encouraged to prepare so they can upgrade immediately tomorrow. Should details of the vulnerabilities become public, or should evidence of active exploitation appear we will release sooner.
Full details, affected versions, and the fixed versions will be published with the release.

2026-04-20 19:42:12 UTC

The PHP Foundation wants to publicly share our support for the petition that aims to classify open source contributions as officially recognized volunteer work in Germany. This is a very important distinction for all our open source friends and community members living in Germany, but anyone can sign the petition. It would also be appreciated if you want to spread the word and help us help the organizers reach the 30,000 signatures required to bring it to quorum. 🙏 🐘 🚀
https://www.ehrenamt-opensource.de/en/

2025-11-10 15:06:10 UTC

The PHP Foundation is Seeking a New Executive Director! 🐘💜
We're asking the PHP community to help find the right person for this role. If you know someone who would be an excellent fit, please encourage them to apply or reach out to us directly.
https://thephp.foundation/blog/2025/11/10/seeking-new-executive-director/ #php #phpc #opensource

2025-10-10 11:39:48 UTC

Say goodbye to parse_url() headaches! 🥳
PHP 8.5 is introducing a new URI Extension with standards-compliant (RFC 3986 & WHATWG) and secure URL parsing. It provides a clean API and lets you easily modify URI components.
Learn more 👇
https://thephp.foundation/blog/2025/10/10/php-85-uri-extension/

2025-04-10 14:53:55 UTC

We are pleased to announce the completion of security audit of PHP core!
Executed by @npub1zhy…cve0 in partnership with @npub1c8c…lkhj and commissioned by the @npub1yng…nhrk.
Learn more: https://thephp.foundation/blog/2025/04/10/php-core-security-audit-results/

2024-11-22 11:49:19 UTC

The PHP Foundation is officially 3 years old! 🎉
With a team of 10 engineers, we’ve delivered big features, while improving performance, security, and infrastructure of the language.
Huge thanks to our sponsors and the PHP community. Let’s keep building!
🐘💜
https://thephp.foundation/blog/2024/11/22/php-foundation-turns-three/

2024-08-19 18:05:42 UTC

Curious about the current state of Generics in PHP?
This article provides the most comprehensive answer to date.
https://thephp.foundation/blog/2024/08/19/state-of-generics-and-collections/

2024-07-29 15:11:03 UTC

🚨 Joe Watkins (krakjoe), a pillar of the PHP community and one of the creators of @npub1yh5…g8j5, needs help!
After battling severe health issues, he's facing homelessness & loss of life-saving meds. Please donate if you can and help reshare ❤️‍🩹
https://www.gofundme.com/f/a-big-ask-from-a-big-community