Two updates pushed to the PHP Git server over the weekend added a line that, if run by a PHP-powered website, ... all PHP source code changes will be made directly to GitHub rather than to git.php ...

Arbitrary code can be executed on remote PHP servers through the argument injection attack. ... One example, WatchTowr noted, occurs when queries are parsed and sent through a command line.

Having tried Maypole, I can confirm that Simon and Sebastian are not lying. Only a handful of lines of code is required to build a very functional application. Some setup is required, ...