artisanal software
ServicesApproachPricingWorkAboutInsightsContactBook a call

Insights

Plain-English writing about building software: what it costs, what goes wrong, and what to check before you launch something an AI wrote.

AI & code quality

AI drafts. A person owns every line.

Cornerstone · Security & upgrades · 8 min read

PHP security and upgrades in 2026: what’s broken, what’s end-of-life, and how to fix it

On October 21, 2026, PHP shipped emergency fixes for two critical flaws nicknamed PHP2Shell. Which versions are safe, how to check yours, and how to patch now and upgrade before PHP 8.2 reaches end of life.

One email a month. No pitch.

What we learned building things, what broke, and what it cost. Unsubscribe in one click.

Custom software, built to fit

Tell us the thing that will not work.

Thirty minutes on a call. We will tell you what it takes, what it costs, and whether you should build it at all.