Mass hysteria, or something.

I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796

Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?

Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn’t from reading news sites

  • realitaetsverlust@piefed.zipEnglish
    2·
    3 hours ago

    Or is this really prevalent in PHP ecosystem?

    Not anymore.

    You used to see eval a TON in like the early days, with like PHP 4 and 5. People just weren’t very experienced and PHP in itself had it’s limitations, and people worked around those by utilizing eval.

    But modern PHP code rarely ever uses eval. Modern toolings like PHPMD even flag eval as an error, causing it to fail a pipeline if used in one. If you find eval in a codebase today, it’s either a badly modernized legacy one or written by a retard.