Photo via The Straits Times

PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says

Read the original at The Straits Times ↗
Cite

The Straits Times. (2026, October 24). PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says. The Straits Times. https://www.straitstimes.com/world/united-states/php-foundation-under-funded-with-only-1-full-time-staff-member-director-says

Dated from the outlet's own feed. Check the original for its byline.

The Straits Times · collected 2026-10-24 · by The Straits Times

Quick Summary

Elizabeth Barron, the executive director of the PHP Foundation, reported on October 23 that the foundation has only one full-time staff member and operates with mostly part-time contractors, highlighting its limited resources despite supporting a programming language used by up to 70% of global websites. The recent discovery of two critical flaws in PHP underscored the importance of adequate funding for the foundation’s security efforts and maintenance work.
Written by AI on 2026-10-24, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

The PHP Foundation, which supports the programming language PHP used by up to 70% of global websites, is severely underfunded with only one full-time staff member and 14 mostly part-time contractors. Executive director Elizabeth Barron disclosed this in an email on October 23rd. Despite its critical role in web security, the foundation relies solely on donations and grants for funding, with board members serving as unpaid volunteers. The recent discovery of two serious flaws in PHP highlighted the importance of the foundation's work, though it has no evidence that hackers exploited these vulnerabilities before they were patched. The foundation collaborates with cybersecurity firms such as Wiz and Calif, and tech companies like OpenAI to investigate security issues and coordinate fixes.

Written for “PHP Foundation Funding Issues” on 2026-11-01, grounded in this article and the 0 other(s) covering the same event.

Story

📰 PHP Foundation Funding Issues
Technology · 1 article(s) covering the same event.

Compared with similar articles

This article reads unscored and hedges 7% of its claims. Each row says how that neighbour differs.
Websites taken down across Europe ahead of critical cyber-security update Different event
BBC News
Hedges 4 of 25 claims Outlet record 68/100
“The articles discuss different aspects related to PHP security, with Article A focusing on immediate actions taken by organizations due to vulnerabilities, while Article B addresses the funding and staffing situation of the PHP Foundation.”
Government websites go dark as vulnerabilities in programming language send shudder across internet Different event
The Straits Times
Hedges 2 of 13 claims Outlet record 66/100
“Article A reports on vulnerabilities in PHP causing websites to go dark, while Article B discusses the funding and staffing of the PHP Foundation in response to the disclosed flaws.”
Explainer-What is PHP and why did it take government websites offline? Different event
The Straits Times
Hedges 4 of 26 claims Outlet record 66/100
“The articles discuss different aspects of PHP, with Article A focusing on recent vulnerabilities that caused government websites to go offline, while Article B discusses the funding and staffing issues within the PHP Foundation.”
Canadian government sites among those offline after flaw identified in widely used computer language Different event
CBC News
Hedges 2 of 18 claims Outlet record 74/100
“The articles discuss different aspects related to PHP but describe distinct events: one about sites going offline due to a vulnerability, and another about the funding situation of the PHP Foundation.”
World leaders warn against security flaw found in PHP computer programming Different event
Al Jazeera
Hedges 2 of 21 claims Outlet record 60/100
“The articles discuss related topics about security flaws in PHP and funding issues for the PHP Foundation, but describe different specific events happening at different times.”
What is PHP and why did it spark a global cyber security scramble? Different event
BBC News
Hedges 5 of 41 claims Outlet record 68/100
“Article A discusses the discovery of vulnerabilities in PHP and the immediate global response, while Article B addresses the funding issues of the PHP Foundation post-discovery.”
Websites down: What is PHP and how has it raised AI hacking fears? Different event
Dawn
Hedges 7 of 25 claims Outlet record 72/100
“Article A discusses the discovery of security flaws in PHP and its impact on websites, while Article B focuses on the underfunding and staffing situation of the PHP Foundation.”
No breach of Budget security after critical flaw found in PHP, minister says Different event
Evening Standard
Hedges 3 of 20 claims Outlet record 65/100
“The articles discuss different aspects related to PHP security and funding but do not describe the same specific incident or time.”
Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis Different event
NBC News
Hedges 8 of 30 claims Outlet record 60/100
“The articles discuss different aspects of the PHP security issues; one focuses on hackers' difficulty exploiting vulnerabilities, while the other addresses the funding and staffing of the PHP Foundation.”
PHP bug "about as bad as it can get," cybersecurity reporter says Different event
CBS News
Hedges 1 of 2 claims Outlet record 66/100
“The articles discuss different aspects related to PHP but describe distinct events: one focuses on a critical vulnerability in PHP, while the other discusses the funding and staffing of the PHP Foundation.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
15
sentences that state something as happening or true
Uncertain
7%
1 of 15 hedged ("reportedly", "may", "according to")
Leaning
withheld
no quote in the article backed the model's score
Publisher signals
66/100
The Straits Times's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-24 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

The Straits Times · 4121 article(s) · 5 correction(s) detected
Running correction rate · 5 correction(s)
2026-10-30
Number of residents leaving Oleshky still unclear, Kyiv says
2026-10-21
X Community Notes ‘failed’ to flag US election falsehoods, study says
2026-10-04
Tennessee prison chief resigns after failed execution
2026-10-03
US prison chief resigns after failed execution of death row inmate Christa Pike
2026-09-13
Russia hits Ukrainian-Polish border area, Kyiv says

Who wrote this

The Straits Times
2659 article(s) here · 1 carrying a prediction
🔮 Final results are due in coming days and not expected to change the outcome.
2026-11-01 · assertive framing · Serbians mark railway disaster that led to rise of victorious student movement
🔮 The head of a student group said a campaign of high school blockades would restart from Nov 2, adding the government’s proposals did not go far enough.
2026-11-01 · assertive framing · French school blockades to restart from Nov 2: Student group
🔮 “Evidence is being reviewed and further action will be taken as appropriate.”
2026-11-01 · assertive framing · British police say 325 people were arrested at Palestine Action demo
🔮 The head of Germany’s far-left Die Linke (The Left) party, Ines Schwerdtner, told the Rheinische Post daily that the demands made by those “demonstrating peacefully will not disappear because small angry groups followed up with acts of vandalism”.
2026-11-01 · assertive framing · Violence after Germany’s Gen Z demos slammed by politicians
🔮 Pope Leo says he hopes Oleshky truce could spur Ukraine-Russia peace efforts VATICAN CITY, Nov 1 - Pope Leo said on Sunday he hoped cooperation between Russia and Ukraine in implementing a ceasefire in the Russian-occupied Ukrainian town of Oleshky would pave the way for broader peace efforts. Ukraine and Russia said on October 23 they had agreed to a ceasefire in Oleshky, brokered by US first lady Melania Trump with the additional involvement of Pope Leo, to allow aid deliveries and evacuations from the frontline town, which has been suffering acute food and medicine shortages. "
2026-11-01 · assertive framing · Pope Leo says he hopes Oleshky truce could spur Ukraine-Russia peace efforts
🔮 The assessment will deepen “understanding of the condition” of the cables within the bridge, the City Bridge Foundation, a charity that manages five crossings over the River Thames, said in its 2025-26 report.
2026-11-01 · assertive framing · London Bridge gets early review to test structural condition
🔮 "The rioters and looters will be identified and held accountable," Interior Minister Alexander Dobrindt was quoted as telling the Bild tabloid on Sunday.
2026-11-01 · assertive framing · Germany's Dobrindt calls for tough penalties after Frankfurt unrest, Bild says
🔮 Ukraine says it supports a full ceasefire on energy targets, including its own battered power grid, but that Moscow is unwilling to agree to this.
2026-11-01 · assertive framing · Russian strikes cut power to thousands in Ukraine as drones damage Russian facility
🔮 Senior officials, including deputy chief of staff Stephen Miller and budget director Russell Vought, have been working with the White House Counsel’s Office since April to identify executive actions on immigration, tariffs, housing costs and federal spending that Trump could pursue without congressional approval, said the three sources, who spoke on the condition of anonymity.
2026-11-01 · mixed framing · Trump White House maps path to govern without Congress if Democrats win
🔮 Explainer-How US news organizations will make midterm race calls
2026-11-01 · assertive framing · Explainer-How US news organizations will make midterm race calls
Also by The Straits Times
Serbians mark railway disaster that led to rise of victorious student movement
2026-11-01 · The Straits Times
French school blockades to restart from Nov 2: Student group
2026-11-01 · The Straits Times
British police say 325 people were arrested at Palestine Action demo
2026-11-01 · The Straits Times
Violence after Germany’s Gen Z demos slammed by politicians
2026-11-01 · The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 2659 articles by The Straits Times →

Topics

AMSTERDAM Calif OpenAI PHP Foundation Wiz

Subjects

Barron PERSON · 2× Calif ORG · 2× OpenAI ORG · 2× Wiz ORG · 2× AMSTERDAM GPE · 1× Cloudflare ORG · 1× Elizabeth Barron PERSON · 1× PHP ORG · 1× PHP Foundation ORG · 1× the PHP Foundation ORG · 1×

Narrative

While Web security company Cloudflare has reported millions of hacking attempts, Barron said the foundation had no evidence hackers were able to exploit the vulnerabilities before they were disclosed, or on sites that have been patched.
framing: assertive · carried by 1 article(s) · first seen 2026-10-24
🔮 Yet the non-profit foundation that supports PHP, which may underpin up to 70% of sites globally, operates on a shoestring budget.
2026-10-24 · The Straits Times
PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says · assertive framing

Claims (15 extracted, 1 hedged)

PHP Foundation ‘under-funded’ with only 1 full-time staff member, director says AMSTERDAM - asserted
director → fund → member
The discovery of two serious flaws in PHP this week set off a global scramble to keep websites safe from hackers, showing just how critical the three-decade-old open-source programming language is to the internet. asserted
language → set → internet
Yet the non-profit foundation that supports PHP, which may underpin up to 70% of sites globally, operates on a shoestring budget. uncertain
which → support → budget
“We have one full-time staff member (that’s me) and 14 mostly part-time contractors,” executive director Elizabeth Barron of the PHP Foundation said via e-mail in an interview on Oct 23. asserted
Barron → have → Oct
Board members are unpaid volunteers, and funding comes from donations and grants. asserted
funding → come → donations
The foundation works with outside researchers and companies, including OpenAI and cyber security firms Wiz and Calif, to investigate security flaws and coordinate fixes, including the Oct 21 patches. asserted
foundation → work → patches
While Web security company Cloudflare has reported millions of hacking attempts, Barron said the foundation had no evidence hackers were able to exploit the vulnerabilities before they were disclosed, or on sites that have been patched. asserted
that → report → sites
“We received no further indication from OpenAI, Wiz or Calif, with whom we’re working closely on this issue, regarding any issues on patched systems,” she said. asserted
she → receive → systems
Artificial intelligence has proved both a help and a burden to the foundation. asserted
intelligence → prove → foundation
It helped researchers find the flaws, which had been present for a decade, and Barron said it made programmers more efficient. asserted
programmers → help → decade
However, it is also increasing maintainers’ workloads. asserted
it → increase → workloads
The PHP project is receiving nearly twice as many proposed code changes as a year ago, “yet the number of contributors hasn’t doubled,” she said. asserted
she → receive → contributors
Reviewing contributions and bug reports requires “a massive amount of human input and experience”. asserted
Reviewing → review → input
Recent events have shown how heavily companies and governments rely on PHP, Barron said. asserted
Barron → show → PHP
“Given that reliance, it is clear that PHP is incredibly under-funded.” asserted
it → give → reliance
💬Give feedback
🕘History 🎫Support
Terms · Privacy · beta v2.0.0
Articles to 1 Nov 2026