legacy-php

PHP 8.1.34 CLI/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.

PHP 7.4.33 CLI/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.

Mitigations for PHP installs that cannot update yet: CVE-2026-109618 / CVE-2026-109619 (php2shell) and CVE-2026-115560. Edge rules, auth before PHP, request limits, PHP settings. Unofficial. The real fix is updating PHP.

A lightweight, fast TOON (Token-Oriented Object Notation) library for PHP. Optimized for LLM contexts. PHP 7.0-8.0 [legacy] and 8.1 and up [modern] support.

Docker image with PHP 4.3.0 running via CGI under Apache HTTP Server 2.0

A very simple PHP framework for legacy environments.

[Archive] Cinema System (2020) | SPM Sains Komputer Folio. • Context: Form 5 school project. • Tech: PHP & MySQL (WAMP). • Features: Registration, Login, Movie DB & Ticket Booking. • Goal: Fundamental CRUD & Database design.

Unofficial security backport: source patch for end-of-life PHP 7.2 addressing CVE-2026-109618 / CVE-2026-109619 (php2shell), ported from the official PHP 7.4 backport. Unsupported, no warranty, limited verification.

Portable .claude/ config for PHP projects — layered rules, skills, and hooks that adapt from Laravel to legacy code.

Claude Code skills for the solo engineer who just inherited a 17-year-old production system. Audit, deploy, monitor, and report — without a DevOps team.

Unofficial security backport: source patch for end-of-life PHP 7.3 addressing CVE-2026-109618 / CVE-2026-109619 (php2shell), ported from the official PHP 7.4 backport. Unsupported, no warranty, limited verification.

Security backports for final PHP 5.x releases on Windows x86

Static analyzer for legacy PHP: dependency graph, dead code detection with confidence levels, auto-generated docs. AST-based, zero framework, standalone HTML report.

Prebuilt, relocatable PHP binaries for asdf: frozen EOL versions 5.4-8.1 on linux-x86_64, pinned inputs, sha256-verified, no local compile.

Dockerized PHP 5.6 + 7.4 environment - MSSQL/FreeTDS, Memcached, Redis, Xdebug, Laravel

Multi-PHP (7.2-8.4) Docker local dev environment with nginx, MySQL 8, phpMyAdmin, trusted HTTPS and a stack helper CLI.

A tiny input vetting library for legacy PHP code

A deny-by-default capability linter for PHP. A one-screen policy says what the code may do; the check fails on anything else. Reads PHP 5 source on a PHP 8 runtime, and judges SQL escaping by where the value actually lands.