Pinned Tweet
And….
PHPConnect 2026 was a successs❤️
@PhpTalks team, @drumzminister , @stephenjude_ we have done well
Where do I even begin✨
Daniel #PHPCONNECT'26 retweeted
Rebuilt Windows binaries with updated brotli version are available: php.net/archive/2026.php#202…
#php #windows
Daniel #PHPCONNECT'26 retweeted
⚠️ Important Security Advisories Inside
Along with upgrades for this week's PHP vulnerabilities, we announce 7 security advisories applying to NativePHP Mobile
Everything is patched
• `composer update`
• `php artisan native:install --force`
• Recompile and release
Full details:
nativephp.com/blog/our-first…
Daniel #PHPCONNECT'26 retweeted
PHP Talks Lagos is holding a meetup on Saturday, 31 October.
Our guest speaker, @_semeton. creator of Agent Contract, will be speaking on:
Engineering Memory for AI Coding Agents in PHP Applications
Coding agents can repeat mistakes when they lack project context. 🧵
Daniel #PHPCONNECT'26 retweeted
php vulnerabilities: time to clarify what really happened
here's my conversation with @derickr, a member of php internals. we go through the full timeline and the facts
watch here: youtu.be/5X5csEbmHqs?si=uAk7…
Daniel #PHPCONNECT'26 retweeted
PHP & Blade. Real native interfaces. 📱
@ShaneDRosenthal , co-founder of NativePHP, shows how you can build apps that run on SwiftUI for iOS and Jetpack Compose for Android without leaving PHP. He ends with a live build of a Laravel and NativePHP game, taken from prompt to App Store.
If you've been waiting for a reason to build a mobile app, here it is.
▶️ Watch the full session: youtu.be/Vl-yfZQeeYU?si=tpHI…
#PHPConnect2026 #AIandTheEngineer #PHP #Laravel
Daniel #PHPCONNECT'26 retweeted
The keynote is up. 🚨
@derickr , creator of Xdebug, takes you inside the PHP engine: how the scanner turns your code into tokens, how the parser builds the Abstract Syntax Tree, and how that becomes bytecode the engine runs.
If you've ever wanted to understand what PHP does before your code runs, this is the session.
▶️ Watch the full keynote: youtu.be/dxk-KGCk5cM?si=J1dY…
📑 Slides: derickrethans.nl/talks/php-p…
#PHPConnect2026 #AIandTheEngineer #PHP #Xdebug
Daniel #PHPCONNECT'26 retweeted
Missed @ElizabethN ‘s session at PHPConnect'26? Now you can watch it. 🐘
The Executive Director of The PHP Foundation walks through "Communities, Contribution & Opportunities": what the Foundation's funded developers delivered in 2025, the plan for 2026-2027, and the Community Special Interest Groups you can join.
If you've ever wondered how to get involved in PHP beyond writing it, start here.
▶️ Watch the full session: youtu.be/0mM0YwGJN2M?si=8jix…
#PHPConnect2026 #AIandTheEngineer #PHP #Laravel
Daniel #PHPCONNECT'26 retweeted
Pro-tip: stop believing any and all bullshit people are posting on here rn. Refer to credible sources like PHP core team members or @ThePHPF.
This quoted post is unavailable.
Daniel #PHPCONNECT'26 retweeted
⚠️ Sharing for awareness
Running versions of PHP older than 8.2?
Plan for a longer window (possibly never!) for patches to be backported
phpc.social/@ramsey/11747601…
Daniel #PHPCONNECT'26 retweeted
The #php2shell patch for FrankenPHP is out now. Docker images available, binaries to follow in the next hour or so.
Upgrade and spread the news, thank you all for your patience!
github.com/php/frankenphp/re…
Daniel #PHPCONNECT'26 retweeted
Of course it'd be better to have vulnerability in PHP at all, but I'm deeply moved by today's events:
1) The absolute profesionalism of everyone involved from @ThePHPF. Thank you!
2) The number & size of sites went off-line at 2PM UTC to patch their servers. PHP totally runs the world!
3) PHP in news reports in press and TV across the world.
All the best🌝
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.