
Lead Full-stack engineer @WeWorkJP. Organizer @LaravelliveJP & @phptokyo 👉 Laravel Live Japan: https://xitter.cf/t.co/vWQ5zWfJMx 👉 Discord: https://xitter.cf/t.co/z9uEaYrDtr
Tokyo, Japan
Joined January 2022
- Tweets3.1K
- Following633
- Followers694
- Likes82.7K
No big breaking changes planned other than dropping CJS in Vue 4 #vuefes
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
"The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it." @mattstauffer
phpnews.net/php2shell-php-re…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
php vulnerabilities: time to clarify what really happened
here's my conversation with @derickr, a member of php internals. we go through the full timeline and the facts
watch here: youtu.be/5X5csEbmHqs?si=uAk7…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
See also the information advisory on PHP website by the PHP security team: php.net/archive/2026.php#202…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The PHP security team is advising everyone to set this config until the next patch:
session.upload_progress.enabled=0
I’ll be cutting a release shortly where serversideup/php will do this for you by default ⚡️
php.net/archive/2026.php#202…
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP security team: keep session.upload_progress.enabled=0 until the next bugfix release. It blocks a rare RCE path, CVE-2026-115560.
PHP Warns of Another Session Upload Progress RCE Path
phpnews.net/php-session-uplo…
Gotta keep an eye on this for when Linux support drops, but I will soon play with it on my MacBook:
phibrowser.com/
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted

















