Two critical bugs in PHP itself let attackers run code on servers without logging in. Here is how they were found, why the fix took two years, what the AI headlines got wrong, and why Craft 5 sites were better positioned than most.
For the love
of Craft CMS
CraftEntries is the voice of the Craft CMS community. Start with the podcast, stay for the people and the craft.
Latest Podcast Episode
All Episodes
Episode 24 ·
From Notepad to Guiding AI: Why You Shouldn't Be Worried
Notepad, tables, Grunt, webpack, Vite, and now AI. Michael Thomas has watched the tooling change for twenty-odd years and doesn't believe this time is different. We talk about the Craft CMS skills he built for Claude Code, and why he still reviews every line.
with Michael Thomas
Listen nowArticles
A collection of articles about Craft CMS and web development. Info about the latest releases, events, or tutorials about Twig and other web technologies.
New in Craft CMS 5.10
Craft 5.10 came out yesterday. The headline is a deletion workflow that stops you before you break something, and it turns out Craft has had one of these for years without anyone noticing.
New in Craft CMS 5.9
Craft 5.9 came out yesterday. Two or three of the additions will change how I set up the control panel on new projects.
Dot All 2025
Dot All 2025, the official Craft CMS conference, took place from 23 to 25 September in Lisbon. The venue was the Pátio da Galé, opened in 2011, in the center of the city next to the Praça do Comércio and right on the bank of the Tejo. Around 150 attendees heard the talks and participated in the workshops.
Moritz L'Hoest and the habit of writing it down
Moritz L'Hoest was on my list of potential guests for a couple of years before I wrote to him, and I was waiting for an occasion to get in touch.
Links
External links on Craft CMS, accessibility, plugins and tutorials.
-
Craft CMS and PHP2Shell - how we dealt with it (opens in new tab)
-
Craft CMS vs WordPress: the real costs (opens in new tab)
-
Why Craft is Publishing More Security Advisories (opens in new tab)
-
Moving Craft Content Between Environments with Transport (opens in new tab)
-
The Best Craft CMS Learning Resources in 2026 (opens in new tab)
Crafters
Craft CMS is the ideal content management system for developers, designers, and editors. That's why we present creatives who like to work with Craft.
“I love Craft CMS for its ease of use and the welcoming and vibrant community supporting it.”
Web Developer/Engineer