PHP Foundation 'under-funded' with one full-time staff member, director says
Key Points:
- The PHP Foundation, which supports PHP used by up to 70% of websites globally, operates with minimal resources, having only one full-time staff member and 14 part-time contractors, with funding from donations and grants.
- The foundation collaborates with external researchers and companies like OpenAI, Wiz, and Calif to identify and fix security vulnerabilities, including recent patches released on Wednesday.
- Despite millions of hacking attempts reported by Cloudflare, there is no evidence that the disclosed PHP vulnerabilities were exploited before patches were applied.
- Artificial intelligence has aided in discovering long-standing flaws and improved programming efficiency, but it has also increased the workload for maintainers due to a surge in proposed code changes without a corresponding increase in contributors.
- The heavy reliance on PHP by companies and governments highlights the foundation’s critical role, yet it remains significantly underfunded to meet growing demands.