php-src
AGENTS.md42k starsChanged 7 months agoBSD-3-ClauseView on GitHub
Before starting work and again before opening a pull request, check for existing pull requests as described in CONTRIBUTING.md. Do not open a duplicate of an existing pull request, unless you have a very good reason to do it. When scanning php-src for vulnerabilities, please respect our security policy summarized in ./SECURITY.md. You can find the full policy here.
We split this AGENTS.md into the rules it gives an agent
3 rules. About 0 are common, 2 are distinctive, and 1 is very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈2
Distinctive · estimate
This author's own choices. Worth a look.
1
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 5
Before starting work and again before opening a pull request, check for existing pull requests as described in CONTRIBUTING.md.
- Distinctive: line 7
Do not open a duplicate of an existing pull request, unless you have a very good reason to do it.
- Very specific: line 12
When scanning php-src for vulnerabilities, please respect our security policy summarized in ./SECURITY.md.
≈ “Common” is an estimate: at least 1 in 5 of the 36,368 AGENTS.md files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Agents
Pull requests
Before starting work and again before opening a pull request, check for existing pull requests as described in CONTRIBUTING.md. Do not open a duplicate of an existing pull request, unless you have a very good reason to do it.
Vulnerability reports
When scanning php-src for vulnerabilities, please respect our security policy
summarized in ./SECURITY.md. You can find the full policy
here.
Trending
More talk lately.about the whole repository
Who's talking about php/php-src
- Jimmy on Software“PHP2Shell Explained: How One HTTP Request Can Take Over a PHP Server”YouTube · Oct 24, 2026 · 6.4k views
- Bartini“PHP2Shell: How One Request Takes Over PHP Before Your Code Runs! Update NOW!”YouTube · Oct 21, 2026 · 1.8k views
- Hello Hacker“Update PHP Now - Critical Remote Code Execution Flaw #cybersecurity #infosec”YouTube · Oct 21, 2026 · 1.2k views
- A Hacker News story“PHP 8.2.35”Hacker News · Oct 21, 2026 · 1.1k points
- Sonny Labs“PHP2Shell: Two Critical PHP Bugs. Update Now. #localai #security”YouTube · Oct 22, 2026 · 1k views
The biggest 5 of 116 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 116
Talked about on Stack Overflow, Hacker News, YouTube, GitHub, the web and Bluesky (116 times).
On Stack Overflow · 30
- Oct 11, 2013Catching multiple exception types in one catch block553 votes
- Jul 2, 2018PHP setcookie "SameSite=Strict"?187 votes
- Apr 28, 2014PHP. Is it possible to use array_column with an array of objects177 votes
- Apr 12, 2013PHP: Default cURL timeout value104 votes
- Jan 25, 2013What do the ENT_HTML5, ENT_HTML401, ... modifiers on html_entity_decode do?94 votes
25 more on Stack Overflow
- Sep 14, 2015How to make a PHP extension66 votes
- Jan 11, 2011How to keep json_encode() from dropping strings with invalid characters53 votes
- May 20, 2011How can I get the full string of PHP’s getTraceAsString()?43 votes
- May 24, 2012Will md5(file_contents_as_string) equal md5_file(/path/to/file)?36 votes
- Jun 2, 2012Where is the source code for built-in PHP functions located?28 votes
- Dec 23, 2015POST request to PHP7 with chunked encoding does not properly return result27 votes · 2 answers
- Aug 16, 2015Where are laravel password salts stored?23 votes
- Jan 30, 2020How to install gmp extension for php 7.2 using MAMP on OSX21 votes
- Sep 18, 2010Why strings in $_POST can not contain a dot "."?14 votes
- May 26, 2016PHP: Why Does array Syntax on a Zero Length String Cast the String as an Array?12 votes
- Jul 11, 2013Cannot implement two interfaces that have the same method name12 votes
- May 8, 2017Connect to MySQL using IPv6 address11 votes
- Jan 29, 2015How to open file in PHP that has unicode characters in its name?11 votes
- Nov 14, 2019What is the purpose of the MB_CASE_*_SIMPLE constants?10 votes
- Apr 23, 2015What does session_register_shutdown actually do?10 votes
- Apr 7, 2015PHP password_verify() and slow equals comparison10 votes
- Jul 17, 2014PharData limitation of file name length10 votes
- Dec 10, 2013Why there is imageCreateFrom* if there is imageCreateFromString?10 votes
- Jul 18, 2013PHP (Apache) silently converting HTTP 429 and others to 50010 votes · 2 answers
- Apr 12, 2012How algorithm of strtotime(PHP Date function) Works?10 votes
- Dec 3, 2011Regex email - how to allow plus symbols in email?10 votes
- Jun 3, 2016Should I use `DateTimeInterface` in my php project?8 votes
- Jan 20, 2014PHP's PDO Source Code8 votes
- Oct 14, 2010Throwing an exception instead of error from a PHP extension7 votes
- Apr 22, 2010How are associative arrays implemented in PHP?7 votes
On Hacker News · 28
- Oct 21, 2026PHP 8.2.351.1k points · 581 comments
- Dec 2, 2015PHP 7 Released449 points · 307 comments
- Mar 19, 2012PHP source code now hosted on Github138 points · 14 comments
- Jun 20, 2013PHP 5.5106 points · 109 comments
- Dec 1, 2015Php-7 released14 points
23 more on Hacker News
- Aug 22, 2012PHP drops world domination from TODO list11 points
- Aug 6, 2012PHP's logo GUIDs are dead10 points · 7 comments
- Oct 21, 2026The PHP fix for CVE-2026-109618 and CVE-2026-109619: +11556 lines of code7 points · 4 comments
- Jan 30, 2019Features to be deprecated in PHP 85 points
- Oct 3, 2022PHP 8.2 Upgrade Notes4 points
- Jun 20, 2013PHP 5.5 released in the GitHub repository.4 points
- Jul 24, 2009PHP is now on Github4 points · 1 comment
- Oct 21, 2026PHP RCE via OOM Corruption3 points · 2 comments
- Feb 28, 2026Reified Generics in PHP3 points
- Sep 14, 2023A new PHP JIT implementation based on IR JIT framework3 points
- Feb 19, 2016Commit to revert to mistaken implementation of mt_rand()3 points
- Nov 18, 2012PHP 5.5 Alpha adds coroutines3 points · 2 comments
- Oct 21, 2026PHP RCE via stale global state2 points
- Apr 26, 2021Implement Fibers in PHP2 points
- Dec 7, 2020OPCache: Direct execution opcode file without PHP source code file2 points
- Jun 15, 2020PHP – Replace all whitelist/blacklist with allowlist/blocklist2 points · 3 comments
- Nov 27, 2019PHP 7.4.0 Released2 points
- Sep 19, 2018PHP – Deprecate implicit nullable parameters2 points · 1 comment
- Apr 16, 2026Master branch PHP now BSD 3 Clause1 point · 1 comment
- Jun 4, 2021Let zend_fiber and amphp have fun1 point
- Mar 29, 2021Backdoored Code in PHP Repository (reverted)1 point · 1 comment
- Aug 19, 2015PHP 7.0.0 RC1 tagged1 point
- Dec 18, 2012PHP 5.5 alpha 2 released1 point
On YouTube · 24
- Oct 24, 2026PHP2Shell Explained: How One HTTP Request Can Take Over a PHP Server — Jimmy on Software6.4k views · 12 comments
- Oct 21, 2026PHP2Shell: How One Request Takes Over PHP Before Your Code Runs! Update NOW! — Bartini1.8k views
- Oct 21, 2026Update PHP Now - Critical Remote Code Execution Flaw #cybersecurity #infosec — Hello Hacker1.2k views · 1 comment
- Oct 22, 2026PHP2Shell: Two Critical PHP Bugs. Update Now. #localai #security — Sonny Labs1k views
- Oct 22, 2026웹 개발의 핵심, PHP 인터프리터 소스코드 — Repocast | GitHub 일일 브리핑974 views · 1 comment
19 more on YouTube
- Oct 22, 2026Special Episode: PHP2Shell, the Critical PHP Bug Explained (Patch Now) — codeframesdev698 views
- Oct 9, 2026This Week In PHP Internals | Oct 8, 2026 — Artisan Build649 views · 1 comment
- Oct 24, 2026PHP - What Runs Your Request (Full Tutorial) — Full Stack485 views
- Oct 21, 2026PHP Patched Early. Your Workers Still Need a Restart. — You Code IT401 views
- Oct 21, 2026PHP-Server in Gefahr: php2shell – jetzt updaten! #shorts — CYBS367 views
- Oct 22, 2026PHP vulnerability: update now for CVE-2026-109618 and 109619 — FAQtion349 views · 1 comment
- Oct 22, 2026How PHP's Out-of-Memory Bug Became Remote Code Execution — Incident City277 views
- Oct 23, 2026PHP Zero-Day (php2shell): How to Check and Fix Your Server — NullClips212 views
- Oct 22, 2026PHP Is Dead? Two Critical PHP RCE Bugs and Why You Must Upgrade Now — Sahinur160 views
- Oct 23, 2026PHP脆弱性の経緯をタイムラインで解説｜発端から現在の対応まで — How It Really Works?111 views
- Oct 21, 2026Critical PHP Flaws: FBI and NSA Warn as Websites Go Offline to Patch — The Art Of News88 views
- Oct 27, 20267 in 10 websites run PHP. Here's the bug you missed — Tech Lead Corner78 views
- Oct 25, 2026AI Made a 14-Year-Old PHP Flaw Exploitable: Ask Your Host — WorkSmartOS63 views
- Oct 22, 2026Php-src: fast flexible PHP interpreter for web servers — Next Horizon57 views · 1 comment
- Oct 23, 2026Critical PHP Flaws Explained: What Website Owners Need to Know — 0xShadowSec52 views
- Oct 22, 2026php critical vulnerability: strangers can run code — MatrixGard51 views
- Oct 26, 2026PHP Security Update: Two Critical RCE Flaws | October 21, 2026 — Ersin Akyüz45 views
- Oct 23, 2026PHP Patches Two Critical Flaws | PHP2Shell — IT News Brief40 views
- Oct 27, 2026php-src: The Actual PHP Interpreter You Can Compile Yourself — Open Source Trend1 view
On GitHub · 18
- Nov 21, 2023Add PHP 8.3.0 — docker-library/php67 reactions · 16 comments
- Dec 18, 2019PHP 8.0 support — PHP-CS-Fixer/PHP-CS-Fixer64 reactions · 46 comments
- Sep 12, 2017Add a rule to root-namespace special compiled PHP functions — PHP-CS-Fixer/PHP-CS-Fixer54 reactions · 41 comments
- Apr 14, 2018[Meta] PHP 7.3 support — PHP-CS-Fixer/PHP-CS-Fixer50 reactions · 60 comments
- Feb 11, 2023Package unixodbc-dev has incorrect include — microsoft/linux-package-repositories46 reactions · 34 comments
13 more on GitHub
- Apr 14, 2019Significantly improve file download speed by enabling mmap based… — sabre-io/http41 reactions · 20 comments
- Sep 25, 2024Fix removed "php_strtolower" for PHP 8.4 — Imagick/imagick33 reactions · 25 comments
- Aug 18, 2023cmd/cgo: "fatal: morestack on g0" when interacting with PHP Fibers — golang/go33 reactions · 36 comments
- Jun 16, 2020Resource to opaque object migration — php/php-tasks33 reactions · 17 comments
- Sep 30, 2024PHP 8.4 support — vimeo/psalm27 reactions · 8 comments
- Oct 21, 2026PHP container updates for RCEs?? — docker-library/official-images24 reactions · 7 comments
- Nov 14, 2018Support for PHP 7.4 Preload feature — magento/community-features24 reactions · 17 comments
- Jul 11, 2019Include revert of breaking change in 7.2.20 — oerdnj/deb.sury.org23 reactions · 17 comments
- Feb 14, 2021Multiple engines — the-benchmarker/web-frameworks19 reactions · 59 comments
- Aug 12, 2021Disjunctive normal form types — Girgias/php-src18 reactions
- Jan 20, 2020Fix segfaults in PHP 7.4 because free_obj is set to NULL fixes #70 and #73 — wcgallego/pecl-gearman16 reactions · 5 comments
- Nov 6, 2022[HttpFoundation] Add support for the 103 status code (Early Hints) and other 1XX statuses — symfony/symfony12 reactions · 15 comments
- Oct 10, 2018Remove log decoration from workers output — docker-library/php12 reactions · 6 comments
On the web · 9
- Jul 23, 2025Getting Started with PHP Laravel on Ubuntu 24.04 — dev.to
- Jul 23, 2025Getting Started with PHP on Ubuntu 24.04 — dev.to
- Mar 25, 2025はじめてのPHP(php-src) — zenn.dev
- Dec 15, 2024php-srcをデバックしてみた #PHP — qiita.com
- Jun 1, 2022php.internals: Re: Re: Requesting reviews on php-src pull requests — news-web.php.net
4 more on the web
- Sep 25, 2021How to compile PHP from source on Fedora/RHEL/etc • PHP.Watch — php.watch
- Nov 21, 2020ソースコード（php-src）からPHPをビルドする流れと仕組みを手を動かしながら理解する — zenn.dev
- Sep 22, 2020Growing the PHP Core—One Test at a Time — dev.to
- Jul 12, 2017PHP Freaks - PHP Help 01: Compiling PHP from source — phpfreaks.com
On Bluesky · 7
- Jan 25, 2025📦 php / php-src ⭐ 38,555 (+16) 🗒 C The PHP Interpreter — @github-trending.bsky.social3 likes and reposts
- Dec 10, 2024PHP 😏 github.com/php/php-src — @maxime.veber.im2 likes and reposts
- Oct 22, 2026🔥 Hot Repo！ 🔥 (100+ new stars) 📦 php / php-src ⭐ 40,793 (+110) 🗒 C The PHP Interpreter — @github-trending.bsky.social1 likes and repost
- Feb 1, 2025github.com/php/php-src — @nutz.club1 likes and repost
- Jan 25, 2025今日のGitHubトレンド php/php-src このリポジトリは、PHPというスクリプト言語のソースコードを管理しています。 PHPはウェブ開発に適しており、様々な用途で利用されています。… — @dailygithubtrends.bsky.social1 likes and repost
2 more on Bluesky
- Oct 21, 2026I'm being a little flippant, but my point is that the interpreter is written in C. github.com/php/php-src — @alexgude.com0 likes and reposts · 1 reply
- Oct 4, 2024Eu vejo essas pastinhas malditas de src desde a faculdade lá com C e Pascalzinho. Querer dar o mérito ao Java por isso é injusto. O código… — @wilcorrea.dev0 likes and reposts · 1 reply
Where files are headingNew AGENTS.md files have more rules about keeping secrets out of the code, and fewer about code style.
Of the AGENTS.md files we read, the 28,693 first seen in the last six months, against the older ones: the kind of rule that gained most share, and the kind that lost most. About files like this in general, not this one, and an estimate, since a kind is a pattern in the words.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.