Skip to content

harasim.dev

Security

2026

Signed queues in Symfony 8.2: queue messages are untrusted input

Queue messages are input from outside. I look at Symfony 8.2 signed transports, the move from 7.4 and how to rotate the signing secrets.

October 27, 2026
PHP & Engineering

PHP2Shell: what CVE-2026-109618 and CVE-2026-109619 mean for your servers

Two critical PHP engine bugs went public on 21 October 2026. Here is what they do, why the news noticed, and how I’d patch and protect a server.

October 23, 2026
PHP & Engineering

Preemptive Defense in Symfony PHP Applications

In modern Symfony architecture, security is a structural property, not a layer. Preemptive defense shifts security concerns to the earliest...

preemptive defence
March 31, 2026
PHP & Engineering / Software Architecture

Strict vs. Loose Comparison in Modern PHP: Why Identity Always Wins

In modern PHP development, a long-standing debate is finally being settled. Many developers thought that using declare(strict_types=1) made the strict...

loose vs strict comparison
February 3, 2026
PHP & Engineering

harasim.dev © 2026. All Rights Reserved.