Insights & updates from the build floor

Oct 09, 2026

This Week In PHP Internals - Oct 8, 2026

PHP's default password hash only reads the first 72 bytes of your password, and last week's plan to make it refuse anything longer split the list over backward...

By Len Woodward

Oct 02, 2026 PHP

This Week in PHP Internals - Oct 1, 2026

Pick a password longer than 72 bytes and PHP's default hash keeps the first 72 and quietly drops the rest — so a shortened password can still log you in. Sjoerd...

By Len Woodward

Sep 24, 2026 PHP

This Week In PHP Internals - Sept 24, 2026

PHP is getting a new class for a moment in time: precise to the nanosecond, no timezone, leap seconds ignored on purpose — and it can't tell you what time it is...

By Len Woodward

Sep 17, 2026 PHP

This Week In PHP Internals - Sept 17, 2026

On Tuesday morning an RFC went to a vote, was winning 4 to 1, and its author closed the poll inside the hour — because of what the one no vote said. Plus the ar...

By Len Woodward

Sep 10, 2026 PHP

This Week In PHP Internals - Sept 9, 2026

A PHP RFC went to a vote on Friday and its author pulled it back by Sunday night, over a no vote from the person who wrote the policy it broke — which leaves a...

By Len Woodward

Sep 03, 2026 PHP

This Week In PHP Internals - Sept 2, 2026

For the third week running, no PHP RFC is in the voting phase — so instead of a scoreboard, here's a contributor who scanned half a million PHP files to answer...

By Len Woodward

Aug 28, 2026 PHP

This Week In PHP Internals - August 26, 2026

For the second week running, no PHP RFC is in the voting phase — so the internals list spent the week on a question that isn't about PHP at all: who is actually...

By Len Woodward

Aug 22, 2026 PHP

This Week In PHP Internals - August 19, 2026

No RFC went to a vote, and nothing is in the voting phase at all. A new contributor's array_search_range() ran into a counter-proposal for a general lazy array...

By Len Woodward

Aug 14, 2026 PHP

This Week In PHP Internals - August 12, 2026

The verdict lands on PHP's 35-ballot deprecation vote — list() survives on a flat 23-23 tie — the pipe assignment operator is declined, and PHP 8.6's RFC season...

By Len Woodward