Sushil Kumar 🍀

A self-taught 🕸️ Web Developer 👨🏻‍💻 || Linux 🐧 Lover || Open source 🌐 contributor 👥 || PHP/Laravel 🐘 and Vue.js

[Sushil Kumar 🍀 @CodeSushil]

The biggest myth in web development: “PHP is slow.”

What’s actually slow:
• Oversold shared hosting
• Misconfigured Apache
• No OPcache or caching layers

Blaming PHP is just easier than fixing the server.

#php #laravel #javascript #apache

[cat3lyst @cat3lyst]

the GOAT

[Dane Knecht 🦭 @dok2001]

PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.

We are seeing early attacks emerging and are updating mitigations as new vectors show up.

This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.

[Melkey @MelkeyDev]

Should my new project use PHP or Node?

[The PHP Foundation @ThePHPF]

If you rely on the volunteer maintained https://t.co/29fHgEGRei we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.

[Sushil Kumar 🍀 @CodeSushil]

🚨 Critical PHP RCE Alert (CVE-2026-109618/19)!

Affecting PHP 5 through 8, official patches dropped today, October 21 at 14:00 UTC, for PHP 8.2, 8.3, 8.4, and 8.5.

CVSS 9.2. If you're on older unsupported versions, patch or isolate apps immediately! 🛠️🔒

#CyberSecurity #PHP

[Hristijan Manasijev @kikomanasijev]

I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)

On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.

Patched in 12.68.0 & 13.29.0.

Thanks to the @laravel team & @taylorotwell for the fast fix 🙏

More info 👇

[Taylor Otwell @taylorotwell]

Critical PHP vulnerabilities to be disclosed tomorrow: https://t.co/Wj7Fz7x8Bt.

We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.

You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.

All customers have been emailed and we will be providing further updates via email as the situation evolves.

[The PHP Foundation @ThePHPF]

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.

PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

[Kirill Firsov @k_firsov]

php2shell

Tomorrow is a helluva day.

[Sushil Kumar 🍀 @CodeSushil]

Use my two packages achieved asynchronous http request & response (non-blocking I/O), like javascript but use MySQL objects not PDO and we have alternative Idea going with Fast-route and React php Promise library.

[NativePHP @nativephp]

In just 7 months we've 10x'd our total installs of nativephp/mobile compared to all of 2025

We're on track for +1,000% yoy 🤯

Confident that we'll 10x again by this time next year

🚂 💨

[Tomas Votruba @VotrubaT]

PHPStan: 60 seconds
Mago (Rust): 3 seconds

I thought it was AI slop. Then I went down the rabbit hole... and ended up learning Go 😅

Is PHP becoming a "Rusty" language? 👇

https://t.co/H0rk53HtNp

[Brent @brendt_gd]

Over 2000 people have joined /dev/null in less than 48 hours. Here are my takeaways: https://t.co/Sb5moRs5cm

[Sushil Kumar 🍀 @CodeSushil]

Connect with me on DevNull

here: https://t.co/yJbseQnIow

[Sushil Kumar 🍀 @CodeSushil]

Mine: https://t.co/yJbseQnIow

[nunomaduro @enunomaduro]

dear @taylorotwell, @naderman @fabpot, we are the php community, and right now we building a social media that uses the best language in the world: PHP

here is the link: https://t.co/G4X6nv1uzR

we would mean the world, the stars, the planet, and everything in the between if you could join us

(@taylorotwell sign-in takes less than 5 seconds, so please come on)

[nunomaduro @enunomaduro]

dear @taylorotwell, @naderman @fabpot, we are the php community, and right now we building a social media that uses the best language in the world: PHP

here is the link: https://t.co/G4X6nv1uzR

we would mean the world, the stars, the planet, and everything in the between if you could join us

(@taylorotwell sign-in takes less than 5 seconds, so please come on)

[The PHP Foundation @ThePHPF]

In our latest blog post, @alexdaubois shares how the PHP Security Team operates, how your security reports are triaged, and how you can do your part to help PHP be more secure. https://t.co/enxpESTldV

#phpc #security

[LerdPHP @lerdphp]

Watch Claude Code set up a Laravel project, open a feature branch with its own database, and fix an N+1 query, all through Lerd. Every step shows up live in the dashboard. One take, no cuts.

Setup: from a fresh clone to https://shop.test with a trusted certificate, MySQL, Redis, migrations, seed data and Vite running as a worker.

Worktree: the feature branch gets its own HTTPS subdomain, a Vite worker and a database cloned from main, with the branch's new migration on top. Main stays untouched.

Debugging: Lerd's request inspector flags an N+1, 52 queries with 48 of them the same category lookup. Copy for agent hands it to Claude, which adds the eager load, and the next request runs 5 queries.

#Laravel #PHP

[Vincenzo Petrucci @nahime0]

What if PHP didn't need an interpreter to run?

No PHP installation.
No external runtime dependencies.
Just a native executable.

Meet Elephc 🐘

PHP compiled to native machine code. Built in Rust.

https://t.co/RkJoFkxLNw