Comment by pettijohn
11 hours ago
Silly question, is PHP part of Project Glasswing? Crazy this has been dormant for a decade. And scary to wonder what else is lurking out there.
11 hours ago
Silly question, is PHP part of Project Glasswing? Crazy this has been dormant for a decade. And scary to wonder what else is lurking out there.
The OpenAI post linked says Sol assisted https://openai.com/index/coordinated-disclosure-of-critical-... and they invite more open source projects to apply to their program https://patchtheplanet.org/
Lots of stuff is PHP e.g. most message boards. It was very popular pre-dynamic web.
It’s still popular af. Almost half of any cms site online is powered by Wordpress. Many sales sites use woocommerce (Wordpress plugin). Message boards for sure (phpbb!). Moodle and other similar learning management tools run on PHP. Other cms systems like drupal and joomla make up another big portion of cms installs. I think the custom Wikipedia (mediawiki?) is php.
Yeah, I thought it was dying a bit but was looking for webmail software (Roundcube, etc) a couple days ago and all of it is PHP.
PHP is ONLY popular because of mainly wordpress. Usage outside the big CMS are minimal at best, in 2026. I dont see much greenfield / PHP jobs that are not legacy software these days.
6 replies →
I just got a nostalgia hit remembering all the phpBB type boards.
But also I haven’t seen much of that style of bulletin boards in ages. Maybe the occasional EEVBlog or Ars kinda count?
I slopcoded my own forum software in Elixir/Phoenix recently, starting from my memories of phpBB and SMF forums I used to run. I’m using it as a forum for my vintage camera stall as I have a lot of people who enjoy hanging out at the stall, and it turns out they enjoy hanging out on a retro forum too.
I do want to add some stupid forum features I remember from the 2000s. An RPG mod is definitely on my mind.
phpBB, vbulletin, and XenForo still power more than you might realize - often websites that still have comments are using one of those as a back-end, even if you can't access it directly.
3 replies →
It's still the most widely used server side language on the web thanks to WordPress, unless that has changed recently (it was dropping)
Facebook is developed on a reimplementation of PHP!
Not a silly question at all. The PHP Foundation page mentions that they were given access to Mythos via a third company, and Anthropic paid for the security audit... and it didn't find this. It somehow took 5.6 Sol, and researchers who knew how to steer Sol.
"Earlier this year, we worked with Alpha-Omega to scan PHP with Anthropic's Claude Mythos. But since the Mythos scan, we have added other tools, including OpenAI's Daybreak Red for validating reports and exploits, alongside sanitizer builds and reproduction environments that match our CI on every platform PHP supports."
https://thephp.foundation/blog/2026/10/21/todays-php-securit...
To me, this is either a black eye for the myth of Mythos, or worse - Mythos deliberately wouldn't reveal this vulnerability to them, even in a Glasswing style approval environment. It might not be the model's own fault, maybe the model was trained by Anthropic not to reveal certain vulnerabilities.
I think Claudes are great, Opus 5.5 has been incredibly helpful at building software and helping in other ways... but I am repeatedly seeing unhelpfulness (more like dismissiveness) from Anthropic models when it comes to cybersecurity defence, and even just secure bugfixes. At least, that's my personal take, on a very grumpy day with very little sleep.