PHP

  2. Topics
  3. PHP
Further information
All blog articles on the subject of PHP
Valerie Erhard

Published on 22.10.2026 in the category Security Advisories published.

php2shell: Is the vulnerability already being exploited?

Follow-up on php2shell (CVE-2026-109618, CVE-2026-109619): First attack attempts were already observed before the disclosure. We tell you what you should do now. (read more)

PHP Remote Code Execution Incident Response
Valerie Erhard

Published on 21.10.2026 in the category Security Advisories published.

Security Advisory: Critical PHP Vulnerabilities php2shell

php2shell are two critical remote code execution vulnerabilities in PHP affecting versions 5.4 to 8.x. We explain the background and next steps. (read more)

PHP Web Application Security Zero-Day-Exploits Vulnerability Management Remote Code Execution Incident Response
Regina Okun

Published on 18.09.2018 in the category Web Application Security published.

PHP Security Podcasts on phpdevradio.de

In PHPDevRadio "The Podcast for PHP", Michael Döhler (PHPDevRadio Crew) and Andreas Sperber (aramido) talk about current PHP security topics (read more)

Assume Breach Authentication Authorization • Access Control Best Practice Guide Burp Suite Checklist • Cheat Sheet Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Defacement Hardening IT Risk Management OWASP OWASP ZAP PHP Podcast Prevent Breach Secure Coding SQL Injections Threat Modeling Training Workshop Encryption Web Application
Armin Harbrecht

Published on 05.01.2017 in the category Software Security published.

Secure Software Updates

How can I, as a software manufacturer, provide my users with secure updates? Learn about secure software update mechanisms. (read more)

Best Practice Guide Checklist • Cheat Sheet DDoS PHP Secure Coding Web Application Webserver Zero-Day-Exploits
Andreas Sperber

Published on 15.12.2016 in the category Web Application Security published.

Live-Hacking a Symfony application

Andreas Sperber from aramido is a guest at SensioLabs in Cologne on Dec 21, 2016. He hacks a Symfony app and shows what can be done for IT security. (read more)

Cross Site Scripting (XSS) DDoS Defacement Live Hacking PHP Secure Coding Shopware SQL Injections SSL-Stripping Event Web Application
Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits