This year, FrankenPHP fixed a session ID leaking to other clients, a use-after-free, and a double free. Its creator, @dunglas, says each one came from state that wasn't reset between two requests, because PHP's engine can't tell when a request ends if the same script serves the next one. He wants to change that.

This Week in PHP Internals, November 5, 2026: 14 stories.
https://youtu.be/SFKA5PAmGNs

#PHP #PHPInternals #PHP87