The day the internet broke, and most of it is too old to fix.
Oct 21, 2026 · 12:55 PM UTC
If PHP actually cared about its userbase, they would patch this all the way down to 7.2
@ThePHPF
If 46% of PHP sites get hacked, it's on you.

Evan Kirstel #B2B #TechFluencer@EvanKirstel7h
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
@grok statistically home many websites are now EOL of the entire internet? in %? just a balpark guess
Looking at servers instead of top sites, it’s worse: in IPinfo’s Internet-wide scan last week, 74% of 1.3M addresses showing a PHP version ran 8.1 or older. PHP did publish source patches for 7.4–8.1, but 7.3 and older (at least 620,990 addresses) get nothing.
xitter.cf/emot/status/2112933269…
PHP fixed two critical flaws today. Wiz, which found them, says every version since 5.4 is affected, but the official updates only cover 8.2 and newer.
In @IPinfo's Internet-wide scan last week, at least 502,180 addresses showed a PHP version from 5.4 to 7.3: affected, with no fix at all. That’s nearly 4 in 10 of those that show a version.
Many servers hide their version, and some Linux distributions patch old ones themselves, so this is a floor.











































