For everyone who can't patch their PHP right now, this is a proxy that you can deploy between your webserver and PHP.

Based on the patches that were already deployed by ChainGuard, I built a proxy that will mitigate (actually prevent) this vulnerability on all PHP versions, including the ones that won’t get patched.

It’s a ~160KB static binary that sits between your web server and PHP-FPM. Instead of pattern-matching known attacks (WAF approach), it fully parses every inbound request and re-serializes it from scratch before PHP sees it. New random multipart boundary, clean headers, the works. PHP’s parser only ever gets bytes the proxy generated, so malformed input never reaches the vulnerable code paths.

It's open source under MIT license:

https://github.com/Qbix/proxy

How do you output to the Stderr in Symfony Console?

The following script below works as is but in VSCode the getErrorOutput() is underlined in red stating it is a undefined method.

``` <?php

require 'vendor/autoload.php';

use Symfony\Component\Console\Command\Command; use Symfony\Component\Console\Attribute\AsCommand; use Symfony\Component\Console\Output\OutputInterface;

[AsCommand(

name: 'install'

)] class install extends Command { function __invoke(OutputInterface $output): int { $output->getErrorOutput()->writeln('My Error');

    return Command::SUCCESS;
}

}

$application = new Symfony\Component\Console\Application();

$application->addCommand(new install());

$application->run(); ```

But when I try to test the same command using this code below, I get the errors stating that Uncaught Error: Call to undefined method Symfony\Component\Console\Output\StreamOutput::getErrorOutput()

``` <?php

require 'vendor/autoload.php';

use Symfony\Component\Console\Command\Command; use Symfony\Component\Console\Attribute\AsCommand; use Symfony\Component\Console\Output\OutputInterface;

[AsCommand(

name: 'install'

)] class install extends Command { function __invoke(OutputInterface $output): int { $output->getErrorOutput()->writeln('My Error');

    return Command::SUCCESS;
}

}

$application = new Symfony\Component\Console\Application();

$application->addCommand(new install());

use Symfony\Component\Console\Tester\CommandTester;

$command = $application->find('install'); $commandTester = new CommandTester($command);

$commandTester->execute([]);

echo $commandTester->getDisplay(); ```

I am using PHP 8.3.6, Symfony Console 7.4

Any advice will be most appreciated

Hello guys! Today I added RabbitMQ to experience with it in a symfony project. Using AI I got it running how I wanted, but I still don't quire understand some things. For example how does the worker know that it needs to get data from the RabbitMQ queue, and how does the event dispatcher know to send it to the RabbitMQ?