Commit

ee90386

Spent the day patching PHP2Shell (CVE-2026-109618/109619) on PHP 7.4. No official release for EOL versions, so: pin the upstream backport, verify it byte for byte, recompile PHP from source inside Docker. php -v still says 7.4.33. Trust nothing. Grep the binary. 🔍 #php…

David Ciulla @offskip-dave6db1d71a8

Just shows how important it is to stay up-to-date!

christian @zangetsu025d

the problem arises when the codebase is 10+ years old and the client doesn't want to pay for an upgrade. It happens a lot in Italian public administration projects

13:22 · Oct 24, 2026commit ee90386

Jay Gaha @jaygaha3d

Exactly. The refusal to fund the upgrade creates critical, existential risk, turning a coding problem into a governance one.