This Week In PHP Internals - Oct 29, 2026
A week after two critical bugs in PHP's own engine, one developer asked the internals list to freeze new features and cosmetic deprecations until PHP has a form...
Start a project
Practical notes on Laravel, Livewire, delivery cadence, and accessible design — written in the flow of real client work.
A week after two critical bugs in PHP's own engine, one developer asked the internals list to freeze new features and cosmetic deprecations until PHP has a form...
Two critical remote code execution bugs in PHP itself, both rated 9.2, got an emergency release on October 21, a day early, after their CVE numbers leaked onlin...
PHP's default password hash only reads the first 72 bytes of your password, and last week's plan to make it refuse anything longer split the list over backward...
Pick a password longer than 72 bytes and PHP's default hash keeps the first 72 and quietly drops the rest — so a shortened password can still log you in. Sjoerd...
PHP is getting a new class for a moment in time: precise to the nanosecond, no timezone, leap seconds ignored on purpose — and it can't tell you what time it is...
On Tuesday morning an RFC went to a vote, was winning 4 to 1, and its author closed the poll inside the hour — because of what the one no vote said. Plus the ar...
A PHP RFC went to a vote on Friday and its author pulled it back by Sunday night, over a no vote from the person who wrote the policy it broke — which leaves a...
For the third week running, no PHP RFC is in the voting phase — so instead of a scoreboard, here's a contributor who scanned half a million PHP files to answer...
For the second week running, no PHP RFC is in the voting phase — so the internals list spent the week on a question that isn't about PHP at all: who is actually...
We want to hear about your company. What you're building, what's working, and what you wish you could improve.
You can book a quick intro call or send us an email. No pressure, no forms — just a friendly hello.