The PHP2Shell Exploit. What it is. What it means. What you need to do.

Regardless of whether you're a PHP developer or not, you'll have heard about the recent php2shell exploit, which was all over the mainstream news and internet in the last few weeks. And, you'll likely have been affected by it in one way or another.

Given that it was such a significant event, and now that a little bit of time has passed, I thought it important to discuss what it is, when it was uncovered, what it means for the future of PHP (and the wider software development world), and what you need to do to protect yourself.

So, in this episode, I do just that, quoting a range of sources (such as The PHP Foundation and the Security Now podcast) to make this discussion as meaningful, valuable, and as helpful as I can.

Links from the episode

• Today's PHP Security Release, and How We're Strengthening PHP Security (The PHP Foundation)
• Security advisory: Critical remote code execution vulnerabilities, update now (PHP.net)
• The PHP Foundation Impact and Transparency Report 2024 (The PHP Foundation)
• Security Now Episode 1102: A Strategic Plug Pull
• "PHP Foundation 'under-funded' with one full-time staff member, director says" (Reuters)
• Anthropic's revenue, valuation, and funding
• OpenAI's revenue, valuation, and funding

Want to grow your knowledge further?

Check out the books below, where you can grow your web development skills in a very focused, very hands-on way.

• Deploy with Docker Compose
• Mezzio Essentials

Hosted and produced in Bundaberg by: Matthew Setter.

Website: https://matthewsetter.com.
Follow me on: LinkedIn.

If you like the podcast, and want to support it, how about buying me a coffee?