PHP Foundation has one full-time employee amid security strain
PHP Foundation Executive Director Elizabeth Barron said the nonprofit has one full-time employee, 14 mostly part-time contractors and an unpaid volunteer board, relying on donations and grants. Reports say the foundation worked with OpenAI, Wiz and Calif on two high-risk vulnerabilities, while Cloudflare detected millions of attack attempts; Barron said there was no evidence of successful exploitation before disclosure or against patched systems. AI-assisted research helped uncover vulnerabilities, but code proposals nearly doubled without a corresponding increase in contributors, adding review work for maintainers.
The reports expose a mismatch between PHP’s extensive use and the PHP Foundation’s limited paid capacity, while showing that AI can increase both vulnerability discovery and manual code-review demands.
开源编程语言PHP的维护工作正面临严峻的资源压力。尽管PHP已经发展了约30年，并支撑着全球大量网站的运行，但负责支持这一语言发展的非营利组织PHP基金会，却长期处于资金不足的状态。基金会执行董事伊丽莎白·巴伦近日透露，组织目前只有一名全职员工，其余工作主要依靠兼职承包人员、捐款和资助维持。
巴伦在接受路透社采访时表示，基金会目前只有她一名全职工作人员，另外有14名以兼职为主的承包人员参与工作。基金会董事会成员则全部以志愿者身份履职，不领取报酬。组织的运营资金主要来自企业和个人捐款，以及各类资助项目。
PHP是互联网基础设施中使用广泛的编程语言之一。根据相关估算，全球可能有多达70%的网站在不同程度上使用PHP。这一语言广泛应用于网站后端、内容管理系统、电商平台和各类网络服务，因此其安全性与稳定性不仅关系到开发者，也影响着企业、政府机构和普通互联网用户。