@laravelnews creator @mostlytechpod partnerships @phpnewsnet co-founder 📧 [email protected]
Gastonia, the gateway to CLT
Joined January 2009
- Tweets39K
- Following726
- Followers28.8K
- Likes12.1K
Eric L. Barnes retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Eric L. Barnes retweeted
🚨 Critical PHP vulnerability update 🚨
Patched PHP versions have officially been released!
Here is the latest status on FrankenPHP:
⚙️ Binaries: FrankenPHP 1.13.1 binaries with patched PHP 8.5 are currently building: github.com/php/frankenphp/ac…
🐳 Docker: Waiting on upstream patched Docker images before rebuilding ours
🏷️ Next Release: FrankenPHP 1.13.2 (including unrelated bug and security fixes) will be tagged as soon as 1.13.2 binaries and Docker images are ready
💙 Maintaining open-source projects takes serious effort. Consider supporting the work via GitHub Sponsors and donating to the PHP Foundation!
I love that I'm running on Laravel Cloud today. 🙌
"No manual action is required."
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Just one of the big advantages of running Cloudflare in front.
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Eric L. Barnes retweeted
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Alright who is handing out Laravel stickers at #allthingsopen and why have we not met? 😅
😂😂
I cannot thank @ericlbarnes for getting me out of a tight financial spot!
Dashboard Affirmational is now free to use for another month!!!
dashboard-affirmational.lara…
Eric L. Barnes retweeted
154: Ian Laravel New'd Again!
youtu.be/PvHtaJGH99g
@IanLandsman and @aarondfrancis talk about Laravel New'ing....again....and what that means for Outro, plus huge updates coming to Solo, Aaron's generative universe, and more.
We now have dark mode on @laravelnews - the little switcher is on the top right.
Eric L. Barnes retweeted
Staying on top of the PHP ecosystem just got easier 👇
PhpStorm is proud to sponsor @PHPNewsnet to bring you the latest releases, RFCs, and community news every day!
Check out today's updates: phpnews.net
