A self-taught 🕸️ Web Developer 👨🏻💻 || Linux 🐧 Lover || Open source 🌐 contributor 👥 || PHP/Laravel 🐘 and Vue.js https://teapawt.net/t.co/FRfTJ9Cx3s
Joined December 2020
- Tweets2.2K
- Following77
- Followers46
- Likes6.7K
Pinned Tweet
The biggest myth in web development: “PHP is slow.”
What’s actually slow:
• Oversold shared hosting
• Misconfigured Apache
• No OPcache or caching layers
Blaming PHP is just easier than fixing the server.
#php #laravel #javascript #apache
3
77
Sushil Kumar 🍀 retweeted
Flux for React needs to be absolutely world class in every way.
Gotta make sure every single pixel is accounted for 🤌
Sushil Kumar 🍀 retweeted
Last year my design won the PHP Foundation contest for the PHP 8.5 release page.
This year I went further, a full redesign proposal for the php.net homepage and docs, built around PHP 8.6. Just for the love of PHP, and for fun.
Preview: nunoguerra.com/dev/php
Code: github.com/nunowar/phpnet
Sushil Kumar 🍀 retweeted
yup... thanks for the reminder!
now i remember one of the main reasons we're moving NativePHP Desktop away from Electron
🤣
Sushil Kumar 🍀 retweeted
phprust.com
Yet another #compiled #PHP implementation. This time written in Rust. At first glance, the project looks pretty promising. So, has the future finally arrived? :)
Sushil Kumar 🍀 retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Sushil Kumar 🍀 retweeted
If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.
🚨 Critical PHP RCE Alert (CVE-2026-109618/19)!
Affecting PHP 5 through 8, official patches dropped today, October 21 at 14:00 UTC, for PHP 8.2, 8.3, 8.4, and 8.5.
CVSS 9.2. If you're on older unsupported versions, patch or isolate apps immediately! 🛠️🔒
#CyberSecurity #PHP
180
Sushil Kumar 🍀 retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
Sushil Kumar 🍀 retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.php.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
Sushil Kumar 🍀 retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Use my two packages achieved asynchronous http request & response (non-blocking I/O), like javascript but use MySQL objects not PDO and we have alternative Idea going with Fast-route and React php Promise library.
1
2
56
Sushil Kumar 🍀 retweeted
PHPStan: 60 seconds
Mago (Rust): 3 seconds
I thought it was AI slop. Then I went down the rabbit hole... and ended up learning Go 😅
Is PHP becoming a "Rusty" language? 👇
tomasvotruba.com/blog/is-php…
Sushil Kumar 🍀 retweeted
Over 2000 people have joined /dev/null in less than 48 hours. Here are my takeaways: dev-null.sh/@brendt/commits/…
