sekurakbot (@sekurakbot@mastodon.com.pl)
Problemy z walidacją nazw plików umożliwiały RCE i patch bypass w narzędziu FreeScout
W aplikacji FreeScout odkryto podatność Remote Code Execution (RCE). Dzięki możliwości wgrania na serwer pliku .htaccess, a następnie pliku tekstowego (który przekazywany był do interpretera PHP) możliwe było wykonanie dowolnego kodu na serwerze. Podatność otrzymała numer CVE-2026-27636. TLDR: FreeScout to otwartoźródłowe, samodzielnie hostowane narzędzie do obsługi zgłoszeń (ticketów) i współdzielonej...
#Aktualności #Laravel #Php #Podatność #Rce #Websecurity
Show Original Post
decompwlj (@decompwlj@mathstodon.xyz)
A154809: Numbers whose binary expansion is not palindromic
A154809 ➡️ https://oeis.org/A154809
3D graph, threejs - webGL ➡️ https://decompwlj.com/3Dgraph/A154809.html
3D graph Gen, threejs animation ➡️ https://decompwlj.com/3DgraphGen/A154809.html
2D graph, first 500 terms ➡️ https://decompwlj.com/2Dgraph500terms/A154809.html
#decompwlj #math #mathematics #maths #sequence #OEIS #JavaScript #php #graph #3D #threejs #webGL #triangular #numbers #primes #PrimeNumbers #palindromes #animation #FundamentalTheoremOfArithmetic #sequences #NumberTheory #classification #integer #decomposition #number #theory #equation #graphs #sieve #fundamental #theorem #arithmetic #research
Show Original Post
decompwlj (@decompwlj@mathstodon.xyz)
A154777: Numbers of the form x^2 + 2*y^2 with positive integers x and y
A154777 ➡️ https://oeis.org/A154777
3D graph, threejs - webGL ➡️ https://decompwlj.com/3Dgraph/A154777.html
3D graph Gen, threejs animation ➡️ https://decompwlj.com/3DgraphGen/A154777.html
2D graph, first 500 terms ➡️ https://decompwlj.com/2Dgraph500terms/A154777.html
#decompwlj #math #mathematics #maths #sequence #OEIS #JavaScript #php #graph #3D #threejs #webGL #triangular #numbers #primes #PrimeNumbers #palindromes #animation #FundamentalTheoremOfArithmetic #sequences #NumberTheory #classification #integer #decomposition #number #theory #equation #graphs #sieve #fundamental #theorem #arithmetic #research
Show Original Post
ngate (@ngate@mastodon.social)
🚨 Oh no, someone found a way to sidestep the almighty `disable_functions` in #PHP 8! Quick, everybody #panic and pretend we never trusted this duct-taped-together language to begin with! 🤦♂️ Meanwhile, GitHub is busy cramming #AI into everything, because obviously that's what was missing in our developer lives. 😂
https://github.com/m0x41nos/TimeAfterFree #Vulnerability #Integration #DeveloperCommunity #HackerNews #ngated
Show Original Post
shikiryu (@shikiryu@oisaur.com)
A better way to crawl websites with PHP - Freek Van der Herten's blog on Laravel, PHP and AI https://links.shikiryu.com/shaare/CC0c5g Un crawler de site (et pas que d'une page donc) en PHP qui a l'air d'être clair en plus d'être complet. Sous l'coude.
#php #dev #crawler
Show Original Post
gaelanlloyd (@gaelanlloyd@mastodon.social)
👋 Howdy folks! #seattle #webdev geek here, new-ish to Mastodon. Big into #PHP, #Jekyll, #WordPress, #FreeBSD, #ZFS, and more. Will be tooting about random projects and interesting tidbits.
Show Original Post
jmsche (@jmsche@phpc.social)
Cleanup time! 🧹
Just released v6 of leapt/core-bundle (https://github.com/leapt/core-bundle) & leapt/im-bundle (https://github.com/leapt/im-bundle).
Both now require PHP 8.4+, Symfony 7.4/8.0+ and got some dust removed :)
Show Original Post
darkghosthunter (@darkghosthunter@mastodon.social)
"Required: minimal project to reproduce the issue".
I have no problems in opening an issue in your repo for a bug, but don't fucking make me go into an adventure 20 mins in-and-out to make another project and upload it to GitHub unless you give me a fucking one liner CLI to actually report the fucking thing.
I'm talking to you, #FilamentPHP.
#PHP #Laravel #Coding #Code #SoftwareDevelopment #AppDevelopment #WebDev #WebDevelopment #FOSS #OSS #OpenSource #GitHub #Issue #Bug
Show Original Post
objects (@objects@pleroma.envs.net)
## __**Note** from: Mon, 02 Mar 2026 17:26 CET
I checked and fixed my whole website on the envs pubnix with 'npm exec html-validate'. No more warnings unless they're expected, like empty <a> tags, which are needed for webmentions on pages, blog posts and notes.
I restructured the CSS stylesheets, but kept the look as good as I could like the envs main site. All bash and PHP/JavaScript scripts run as they should. My blog management scripts SHOULD work well enough and the written notes are always checked after editing with 'npm exec html-validate, so I can immediately spot any errors on the posts or notes before I really publish them and can defer/edit them again until no more errors occur.
I never built a complete website before and I'm really proud of it. Especially the integration for webmentions with ActivityPub support was not so easy, because I didn't want to use some fully developed blogging engine like Wordpress or something like this, which certainly have plugins for implementing webmentions and ActivityPub. I did this all by myself, allthough I'm using services like webmention.io and brid.gy. But the tools to post were developed by myself.
You can visit my page at https://dan.envs.net/ and have a look at it.
#envs #php #css #javascript #webmention #activitypub #development #indieweb
(https://dan.envs.net/notes/2026-03-02T17:26)
Show Original Post
TurboLearnPHP (@TurboLearnPHP@mastodon.social)
How to Stop array_slice From Dropping Keys
array_slice resets keys unless you opt in.
#php #arrayslice #keys #bug #howto #arrays
https://www.youtube.com/watch?v=g2_nXTT8zfo
Show Original Post
naderman (@naderman@phpc.social)
Loved the very engaged audience of a thousand people at #LaraconEU 2026 in Amsterdam today at my "Composer Deep Dive" talk! Proud to sponsor the event with Private Packagist / @packagist - Find me and chat about package management or @thephpf ! Slides: https://naderman.de/slippy/slides/2026-03-02-Laracon-EU-2026-Composer-Deep-Dive.pdf #laravel #laracon #php #composerphp
Show Original Post
getlaminas (@getlaminas@phpc.social)
Released: laminas/laminas-router 3.18.0
#php #laminas
https://github.com/laminas/laminas-router/releases/tag/3.18.0
Show Original Post