Lead Full-stack engineer @WeWorkJP. Organizer @LaravelliveJP & @phptokyo 👉 Laravel Live Japan: https://xitter.cf/t.co/vWQ5zWfJMx 👉 Discord: https://xitter.cf/t.co/z9uEaYrDtr

Tokyo, Japan
Joined January 2022
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHPの事で聞いてみたい事があったら、こちらにリプどうぞー!
14
53
2
161
28,353
No big breaking changes planned other than dropping CJS in Vue 4 #vuefes
3
239
さて、#vuefes に向かってます! Heading to #vuefes !
9
312
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
設営完了しました! 🙌 会場で皆さんとお会いできるのを楽しみにしております! #vuefes
33
2
95
4,024
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
"The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it." @mattstauffer phpnews.net/php2shell-php-re…
5
10
1,209
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
php vulnerabilities: time to clarify what really happened here's my conversation with @derickr, a member of php internals. we go through the full timeline and the facts watch here: youtu.be/5X5csEbmHqs?si=uAk7…
3
21
4
115
12,001
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
14
73
9
723
35,691
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHPで新たなRCE脆弱性CVE-2026-115560が判明したと。 設定でシリアライズ方式をphp_binaryまたはphp_serializeにし、実行中にphpへ切り替えるなど、まれな条件で影響するとのことで、緊急修正はなく、次回の通常リリースまでsession.upload_progress.enabled=0を推奨すると。
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
1
80
6
210
30,537
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The PHP security team is advising everyone to set this config until the next patch: session.upload_progress.enabled=0 I’ll be cutting a release shortly where serversideup/php will do this for you by default ⚡️ php.net/archive/2026.php#202…
13
84
7
415
42,766
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP security team: keep session.upload_progress.enabled=0 until the next bugfix release. It blocks a rare RCE path, CVE-2026-115560.
5
4
35
8,605
I tried the Helium browser today and at least my first impression wasn't too great
112
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
49
901
151
2,841
400,157