Two critical bugs in PHP itself let attackers run code on servers without logging in. Here is how they were found, why the fix took two years, what the AI headlines got wrong, and why Craft 5 sites were better positioned than most.
For the love
of Craft CMS
CraftEntries is the voice of the Craft CMS community. Start with the podcast, stay for the people and the craft.
Latest Podcast Episode
All Episodes
Episode 25 ·
Staying small on purpose
Angie Herrera has been running Block 81 in Portland on her own since 2003. She started because there were no agency jobs that year, and told her partner she’d get a real job if it didn’t work out. She talks about ExpressionEngine, keeping plugins to a minimum, and why she never wanted to manage people.
with Angie Herrera
Listen nowArticles
A collection of articles about Craft CMS and web development. Info about the latest releases, events, or tutorials about Twig and other web technologies.
New in Craft CMS 5.10
Craft 5.10 came out yesterday. The headline is a deletion workflow that stops you before you break something, and it turns out Craft has had one of these for years without anyone noticing.
New in Craft CMS 5.9
Craft 5.9 came out yesterday. Two or three of the additions will change how I set up the control panel on new projects.
Dot All 2025
Dot All 2025, the official Craft CMS conference, took place from 23 to 25 September in Lisbon. The venue was the Pátio da Galé, opened in 2011, in the center of the city next to the Praça do Comércio and right on the bank of the Tejo. Around 150 attendees heard the talks and participated in the workshops.
Moritz L'Hoest and the habit of writing it down
Moritz L'Hoest was on my list of potential guests for a couple of years before I wrote to him, and I was waiting for an occasion to get in touch.
Links
External links on Craft CMS, accessibility, plugins and tutorials.
-
How I Took PHP Offline Without Taking My Sites Down (opens in new tab)
-
The 2026 Craft CMS conference as it happened (opens in new tab)
-
PHP delivers. PHP lives! (opens in new tab)
-
Craft CMS and PHP2Shell - how we dealt with it (opens in new tab)
-
Craft CMS vs WordPress: the real costs (opens in new tab)
Crafters
Craft CMS is the ideal content management system for developers, designers, and editors. That's why we present creatives who like to work with Craft.
“Craft is exceptionally lightweight, flexible, modern, and brings what a coding CMS should offer. Multilingualism, flexible field types, and the power of the template language Twig grant almost limitless control over the essential thing of a website: the content.”
Webmaster