NYCPHP Meetup

[csnyder]

Looks like another Friday afternoon upgrade session for a lot of us.
According to the announcement, any code that uses unserialize() on any
values that include user input is vulnerable.


On a related note, does anyone here use Hardened-PHP?

Or as a Slashdot poster wondered earlier, is there any reason why the
Hardened-PHP patches aren't part of vanilla PHP in the first place?

   chris.