Dotkernel is a Headless Platform for building modern web applications. It is made up of Open Source components aimed at businesses that need custom solutions.
Romania
Joined February 2009
- Tweets1.2K
- Following140
- Followers126
- Likes281
Yeah, it smells like a nothing burger
Not sure if it is just curiosity or OCD, but been spending the morning digging into php2shell trying to reproduce the RCE, since none of the ready-to-go versions I saw worked. So far, under controlled conditions with a few deviations from stock PHP config, with a single process model using mod_php (PHP as Apache module) I am able to reliably trigger RCE on PHP 8.5.11 on stock Debian Trixie docker container.
The single process "cheat" is needed because it takes 4 requests to get things just right... I am still poking around and it's worth noting that I am not at the level of folks at @calif_io & @wiz_io, but I know my way around PHP internals and not a complete security neophyte. Obviously the experts may have far easier time getting there and doing something more universal.
It is also worth noting that while I am doing it on plain PHP (<?php echo "hi";) presence of a framework or large application would actually make it easier in some respects, but that's a story for another day.
Dotkernel retweeted
PHP2Shell is a real bug - patch anyway. But a lot of this week's outages weren't about the bug.
No working exploit at release, PoCs that needed an LFI to "work", and still dozens of services pulled offline with no compromise.
The pattern: nobody knew where PHP was running, who owned it, or who could decide. Going offline for an hour to patch is fine. Staying offline because you can't find your own servers isn't.
Wrote it up: apidemia.com/knowledge-base/…
#PHP #PHP2Shell #InfoSec #SysAdmin @ThePHPF
We have shifted more and more processes to take advantage of AI-assisted development and AI SEO. We believe it offers many advantages, if handled properly. AI is a tool, not a crutch, so human input is still a requirement.
apidemia.com/knowledge-base/…
Dotkernel retweeted
get fukt m8
The middleware architecture is built for performance and stability. While this is a simplified graph, it helps visualize the interconnected middleware and lifecycle from beginning to end.
dotkernel.com/architecture/r…
That's why you should start from Mezzio mivroframework. Slow-ish start but provide flexibility
🧠 Frameworks guide you — but don’t lock your thinking.
Stefan Priebsch on why Symfony & Laravel are strong tools, but devs should still question defaults.
✅ Guidance
⚙️ Flexibility
🚀 Better architecture
👉 #IntPHPcon
tinyurl.com/2pn7kta3
#PHP #Symfony #Laravel
Bruno joins our tool stack as our de facto API client. Its benefits, from the offline work, to its performance, outweigh the effort needed to learn its UI.
@use_bruno
dotkernel.com/dotkernel-api/…
Dotkernel retweeted
Qodana offers several ways to help teams identify and address #technicaldebt, including one unexpected method.
The "add to baseline" functionality wasn't originally designed for tracking technical debt, but users have naturally adopted it for that purpose. By adding issues to the baseline, they effectively postpone them for later while ensuring that Qodana doesn't re-flag the same items they've already reviewed.
How does your team handle technical debt?
The Dotkernel Headless Platform takes advantage of the latest trends with native UUID v7 support, PostgreSQL and PHP 8.5.
dotkernel.com/headless-platf…
The Evolution Pattern can satisfy most requirements to grow your API headless platform long-term, to keep it relevant and efficient, as well as to keep users engaged
#PHP #API
dotkernel.com/headless-platf…
Dotkernel retweeted
Create modules in seconds with Dotkernel DotMaker. It handles the file consistency and you can focus on your code.
#mezzio #PHP
shorturl.at/kBm3i
Dotkernel retweeted
AlmaLinux 10.1 Beta “Heliotrope Lion” is now available for all supported architectures!
🟣 Intel/AMD (x86_64)
🟣 Intel/AMD (x86_64_v2)
🟣 ARM64 (aarch64)
🟣 IBM PowerPC (ppc64le)
🟣 IBM Z (s390x)
Read more: almalinux.org/blog/2025-10-2…
The Dotkernel Headless Platform is dedicated to bringing you a suite of secure products. Read on to see what security configs are vital for the platform
#php #security
dotkernel.com/best-practice/…
Dotkernel retweeted
We’re proud to support the #PHP community in making the @official_php website more modern, fast, and inspiring!
Submit your mockups or prototypes for a modern, fast, clean release page and win $1,000 🏆
Redesign @official_php? We hear you. Let’s start small and ship something great: a refreshed PHP 8.5 release page!
Submit your mockups or prototypes and win $1,000 🏆
🗓 Deadline: Oct 22
👉 Details: thephp.foundation/blog/2025/…
Congratulations! Let this article be the first of many. We are familiar with your stance on middleware and we agree with you. Middleware has greater potential overall, as we try to showcase with our applications. We encourage its usage over other architectures
I'm excited to have my first article posted in a magazine aimed at the PHP community. If you know me, you already know my opinion on the middleware vs MVC debate. Let's look toward the future and embrace middleware with its improved maintainability, expandability and performance. Read all about it!
@phparch
phparch.com/magazine/2025/09…
Dotkernel retweeted
#claudecode without #phpstan would be a catastrophe!
Thank God someone built that wonderful tool! ❤️
Happy weekend 😎
#php #ai #coding
