A self-taught 🕸️ Web Developer 👨🏻💻 || Linux 🐧 Lover || Open source 🌐 contributor 👥 || PHP/Laravel 🐘 and Vue.js https://teapawt.net/t.co/FRfTJ9Cx3s
Joined December 2020
- Tweets2.2K
- Following77
- Followers46
- Likes6.7K
Sushil Kumar 🍀 retweeted
Flux for React needs to be absolutely world class in every way.
Gotta make sure every single pixel is accounted for 🤌
Sushil Kumar 🍀 retweeted
Last year my design won the PHP Foundation contest for the PHP 8.5 release page.
This year I went further, a full redesign proposal for the php.net homepage and docs, built around PHP 8.6. Just for the love of PHP, and for fun.
Preview: nunoguerra.com/dev/php
Code: github.com/nunowar/phpnet
Sushil Kumar 🍀 retweeted
yup... thanks for the reminder!
now i remember one of the main reasons we're moving NativePHP Desktop away from Electron
🤣
Sushil Kumar 🍀 retweeted
phprust.com
Yet another #compiled #PHP implementation. This time written in Rust. At first glance, the project looks pretty promising. So, has the future finally arrived? :)
Sushil Kumar 🍀 retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Sushil Kumar 🍀 retweeted
If you rely on the volunteer maintained rpms.remirepo.net we urge you to move to distro packages or building from source now, so you can immediately apply updates. The repo will not have updates today.
Sushil Kumar 🍀 retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
Sushil Kumar 🍀 retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.php.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
Sushil Kumar 🍀 retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Sushil Kumar 🍀 retweeted
PHPStan: 60 seconds
Mago (Rust): 3 seconds
I thought it was AI slop. Then I went down the rabbit hole... and ended up learning Go 😅
Is PHP becoming a "Rusty" language? 👇
tomasvotruba.com/blog/is-php…
Sushil Kumar 🍀 retweeted
Over 2000 people have joined /dev/null in less than 48 hours. Here are my takeaways: dev-null.sh/@brendt/commits/…
Sushil Kumar 🍀 retweeted
dear @taylorotwell, @naderman @fabpot, we are the php community, and right now we building a social media that uses the best language in the world: PHP
here is the link: dev-null.sh
we would mean the world, the stars, the planet, and everything in the between if you could join us
(@taylorotwell sign-in takes less than 5 seconds, so please come on)
Sushil Kumar 🍀 retweeted
In our latest blog post, @alexdaubois shares how the PHP Security Team operates, how your security reports are triaged, and how you can do your part to help PHP be more secure. thephp.foundation/blog/2026/…
#phpc #security
Sushil Kumar 🍀 retweeted
Watch Claude Code set up a Laravel project, open a feature branch with its own database, and fix an N+1 query, all through Lerd. Every step shows up live in the dashboard. One take, no cuts.
Setup: from a fresh clone to https://shop.test with a trusted certificate, MySQL, Redis, migrations, seed data and Vite running as a worker.
Worktree: the feature branch gets its own HTTPS subdomain, a Vite worker and a database cloned from main, with the branch's new migration on top. Main stays untouched.
Debugging: Lerd's request inspector flags an N+1, 52 queries with 48 of them the same category lookup. Copy for agent hands it to Claude, which adds the eager load, and the next request runs 5 queries.
#Laravel #PHP