Tom’s Hardware· Bruno Ferreira ·· 8 小时前AI 评分66
PHP安全事件背后:项目仅有一名全职员工,资金不足可能加剧风险
Lack of staff and funding likely led to the recent PHP security snafu; project has only one full-time employee, but that's just the tip of the iceberg
AI 导读
PHP Foundation资金和人员不足,可能是近期PHP高危远程代码执行漏洞及PHP2Shell事件背后的重要因素。基金会目前仅有一名全职员工,并依靠14名“多数为兼职”的承包商维护PHP核心;修复工作曾多次停滞和重启。报道还指出,接近73%的PHP安装版本已超过EOL日期,约7.7%的网站仍运行PHP 5.x,增加漏洞修复和升级难度。
来源:Tom’s Hardware · tomshardware.com