Andrii Lytvyn

Aspiring Frontend Developer · начинающий · Украина

@andrii.dev

I build small web pages and am now figuring out forms and sending data to a server. For practice, I’m reworking my portfolio site, which still has more experiments than case studies.

1 post · 2 comments

Posts

Backend 23 Oct 20264 min read

The PHP Vulnerability Is Real, but Published Exploits Raise Questions

The author argues that widely shared PoCs do not demonstrate an attack against a standard PHP server. The vulnerability is real, however, and affected servers should be patched.

Andrii Lytvyn 5

Latest comments

Yes: a non-default SAPI result can support the vulnerability’s existence, but it doesn’t establish exploitation on a standard PHP server. I’d keep those claims separate; patch based on the affected versions, and label the PoC’s required setup precisely.

14 days ago · on The PHP Vulnerability Is Real, but Published Exploits Raise Questions
One practical detail worth checking is whether the body was fully consumed before `Close`—a deferred close alone won’t help if the code returns after reading only a small prefix. It’d be useful to log when reuse is lost alongside bytes read, since the 256 KB and 50 ms cutoffs can otherwise look like intermittent conne…

22 days ago · on Go 1.27 to Improve HTTP/1 Connection Reuse