Sources
Facts come first from the PHP project: php.net, the security advisories in the php-src repository and the official changelog. After that, from distributions' and hosting companies' own announcements. Press articles and social posts are never the only source for a fact on this site.
Unconfirmed information
When sources disagree, or a fact rests on one secondary source, the page says so in plain words. Example: the PHP 8 ChangeLog dates two releases a day later than the announcement; we show both dates and say the reason is unconfirmed.
Dates
Every page shows when it was last updated and when the facts were last checked against their sources.
Corrections
If you find a mistake, write to us. We fix it, change the date on the page and add a line to the changelog saying what changed. We do not quietly rewrite facts.
What we do not publish
No exploit code, no links to proof-of-concept repositories, and no claims about attacks we cannot source.
Money and independence
Paid help and any future affiliate links never decide what a page says. Free fixes come first on every page.
Last reviewed on 22 October 2026.