關於這一集
This week, the fix for two critical PHP flaws wasn't in WordPress, a plugin, or your framework. It was in the PHP runtime itself. Plenty of teams patch their apps religiously and never look at the layer underneath.
On this episode of the Pro Coder Show, I walk through PHP2Shell: what the two CVEs fix, why the underlying problem sat since a 2024 audit, and how word got out before the patch. Then a LiteLLM release that shipped a credential stealer through Python startup hooks, and why a key you deleted in the next commit is still in your git history. A Harvard study finds AI tools raise code volume without a matching rise in completed work, and I dig into whether the average hides who's actually speeding up. Plus Cloudflare's TSRS, a Rust port of the TypeScript compiler that isn't a fork. I wrap up with some Pro Coder commentary on patching, process, and constant change.
====
Don't forget to grab your copy of 12 Rules For Pro Coders today at https://www.procoder.io/books/12-rules-for-pro-coders/?video=[VIDEO ID]!
====
Join this channel to get access to perks: https://www.youtube.com/@ProCoderIO/join
STORIES IN THIS EPISODE: 📰
- PHP Foundation postmortem, via Simon Willison
- Socket: PHP patches two critical RCE flaws
- Cloudflare Blog: WAF protections for the PHP vulnerabilities
- Socket: LiteLLM 1.107.0 compromise
- InfoQ: Harvard/Jellyfish study on AI coding productivity
- Cloudflare Blog: tsrs, a Rust port of TypeScript
CORRECTIONS: 📝
- I said 70% of the internet runs on Apache. The ~70% figure is PHP's share of websites whose server-side language W3Techs can identify.
- I described LiteLLM as "doing Docker stuff." LiteLLM is a Python library and proxy for calling many LLM providers through one API.
ALSO SEE: 👀
✅ HOW do I interview for a job? https://youtu.be/oN_B22doViY
RESOURCES: 👇
- Order your copy of 12 Rules for Pro Coders at https://www.procoder.io/books/12-rules-for-pro-coders/?video=[VIDEO ID] today!
GET MORE: 🎉
- Get a FREE tech ebook at https://procoder.io/join
- Listen on Spotify, Apple Podcasts, and more: https://podcast.procoder.io
Do YOU uphold the Pro Coder motto, BE PROFESSIONAL? https://store.procoder.io
DISCLOSURE: All opinions stated here are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "Spring Framework", "VMware", "Pivotal", or anything else is completely unaffiliated with its owners. From time to time, I may post affiliate links for products I enjoy using. They don't cost you anything extra, and I may get a small commission.
#procoder
© 2026 Greg L. Turnquist, All Rights Reserved
