PHP
Coverage of PHP in the Nexus archive.
- Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
Drupal will release urgent core security updates on May 20, 2026, and is advising sites to prepare for the update. The Drupal Security Team warns that exploits may be developed within hours or days. Sites are urged to reserve time for core updates from 5-9 p.m. UTC.
- Laravel raised money and now injects ads directly into your agent
Laravel, a popular PHP framework, raised money and began injecting ads directly into developers' tools. The change has sparked debate among developers, with some criticizing the shift as a monetization strategy. The article links to the original post and Hacker News discussion.
- New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released
Two high-severity command injection vulnerabilities in Composer's Perforce VCS driver could allow arbitrary command execution. Patches have been released to address these flaws, which are tracked as CVE-2026-40176 and another unspecified CVE.
- Show HN: I built a weather site for the Eastern Caribbean
The author developed a weather and hurricane tracking website for the Eastern Caribbean using PHP, MySQL, Cloudflare, Visual Crossing API, and Leaflet.js. The project focused on adapting default climate interpretations for the region's unique weather conditions, with insights shared in a blog post.