PHP Foundation Reveals Severe Funding and Staff Shortages

Two serious security flaws discovered in the PHP programming language this week triggered a global effort to protect websites from hackers. This event highlights how deeply the internet relies on this thirty-year-old open-source technology.

Operations

Executive Director Elizabeth Barron stated that the nonprofit PHP Foundation runs on a very small budget. The group employs only one full-time staff member, who is Barron, alongside fourteen mostly part-time contractors. Unpaid volunteers make up the board, while donations and grants provide the financial support. The foundation partners with outside groups, including OpenAI and cybersecurity firms Wiz and Calif, to look into security issues and release fixes like the patches issued on Wednesday.

Impact

Cloudflare reported millions of hacking attempts, but Barron noted there is no proof that hackers successfully exploited the flaws before disclosure or on updated sites. Artificial intelligence has created mixed results for the group. AI helped researchers uncover the decade-old flaws and boosts programmer efficiency, but it also creates extra work. The project receives nearly twice as many proposed code changes compared to last year without a matching jump in human contributors.

Context

Open-source software powers a huge share of the world's digital infrastructure yet often depends on very small teams and limited donations to maintain critical security. Companies and governments rely heavily on these shared tools every day, making foundation funding a key factor in keeping the wider internet safe.