I have a question, who the fuck made you the moral authority, judge jury or executioner? If you'd like to take it up with anyone, perhaps read that PHP has no warranty expressed or implied. Newer releases (BSD 3-Clause): PHP has completed its move to the BSD 3-Clause license and retired PHP License 3.01. BSD-3-Clause carries the same kind of disclaimer: provided as is, no warranties, no liability for damages. The change was voted on through April 4, 2026. The RFC originally targeted PHP 9.0, then was changed to apply to the “next version” of PHP, so which license applies depends on the release. Code published under a given license version can continue to be used under that version. To be sure, check the LICENSE file in the exact branch or tag you’re looking at. AND PHP is provided with no warranty, and the license says so explicitly. Older releases (PHP License 3.01): The license says the software is provided by the PHP development team “as is,” with all express or implied warranties disclaimed, including merchantability and fitness for a particular purpose. It also says the PHP team and its contributors aren’t liable for any direct, indirect, incidental, special, exemplary, or consequential damages, whatever the legal theory, including negligence, even if they were warned of the possibility. The criminals are the moronic assholes who built a system so insecure in the first place, that a kid in his bedroom could make it hiccup with a few web requests. Don't hate the messengers. ;) Meow.