A WAF Is Not a Patch
- 1371 words
- 7 min read
A web application firewall buys you time and visibility, but it does not remove the vulnerability. What a WAF and virtual patching can and cannot do, and what engineering teams still owe.
A web application firewall buys you time and visibility, but it does not remove the vulnerability. What a WAF and virtual patching can and cannot do, and what engineering teams still owe.
Two critical flaws in the PHP runtime, CVE-2026-109618 and CVE-2026-109619, can allow unauthenticated remote code execution. Here is what the advisories and public reports say, how a WAF and layered controls help, and how to patch PHP and your Docker images.
Jev, Laya, and Liquid d1 can share a request shape without sharing an error profile. Changing the model means revalidating the thresholds, review workload, and deployment behind the application's policy.
GPT-6 Astra is offered as a model that acts inside existing software. The scores I would read first are the ones that show where it stays inside the task, and where it does not win.
Anthropic says Opus 5.5 is at Fable 5.1's level on most work and 40 percent cheaper than Opus 5 at default settings; the useful question is what that does to the cost and the checks of an agent loop.
A typed AI judgment can help software route work, provided the application owns the rules, checks uncertainty, and keeps people responsible for consequential decisions.
AI-assisted work becomes more useful when teams turn repeated discoveries, corrections, and failures into better shared context, checks, and workflows.
Instead of reviewing every line an AI agent produces, design the environment — specs, tests, checks, and feedback loops — so good outcomes emerge reliably.
Good architecture often starts with understanding the system you already have; how requests flow, where dependencies are, and why things ended up the way they are.
Unison can be used as a two-way file sync tool for OSX (macOS), Unix and Windows. Check it out how we synchronized our iCloud folder with a git repository.
If you have a problem similar to “End-of-central-directory signature not found.”, you might need to run a composer clear cache command in order to get it working.
A project/proof of concept that has been shown good results, it’s about a migration from a PHP website to a static blog, no server costs anymore and web-optimized. Check out a few implementation details.
Sometimes after working for a long time, all the remaining local branches are just taking up space. Here's a small snippet to remove all your local branches in one go.
After spending a long time of my life using the normal terminal I met a new tool called iTerm2 because a friend of mine a few year ago. And, this week I've discovered the power of zplug. So, let me try to show you how my terminal looks like now.
Learn to connect to Amazon's RDS service through a Desktop client using an SSH connection that forwards packets to your local machine.
Learn how to configure a GoogleApps account to use it with GoogleTalk in the cross-platform instant messaging client Pidgin.
Shortcodes are extremely useful and easy to use, allowing developers to create custom content for users.
The mysqldump tool backs up MySQL databases, creating a *.sql file with the statements needed to create a copy of the target database.
If while developing a Plugin or Theme for Wordpress you need to know whether a third-party Plugin is Active, then check out this tip.
Learn the advantages of this optimization and find out how and why including jQuery from Google CDN will reduce your website's loading time.
Learn how to install PHPUnit on Apple's operating system, Mac OSX 10.8 Mountain Lion, with this step-by-step guide.
Learn to retrieve a post's content (post_content) in Wordpress based on a post's ID. Get to know the function that can help you with this task.
Lost or changed your username and/or password on the SVN Server and can't change it in Subversive? Then read this guide and learn to solve the problem.
Programming code in 1985 was written on sheets of paper, as Jonh Graham-Cumming, a programmer of that time, shows us.
Learn how to install PEAR on Apple's operating system, Mac OSX 10.8 Mountain Lion, with this step-by-step guide.
Learn how to get the permalink of a page in Wordpress whose post_type is "page". Combining the get_permalink() and get_page_by_path() functions.
The jQuery library lets you register events using the following methods: bind, live, delegate, on. Learn the difference between them.
The wp_insert_user function inserts a user into the Wordpress database. It can also update a user, learn to use this function.
Learn to validate forms using an excellent plugin, get to know jQuery Validade developed by the team at http://bassistance.de.
A simple and quick way to add masks to form fields is to use a jQuery plugin, this plugin is called Masked Input Plugin.
Add functionality to post types in Wordpress 3.0+ using the API with the following function add_post_type_support();
SAMBA is a server and a set of tools that lets Linux and Windows machines communicate with each other, sharing services and files.
Test-driven development (TDD) with PHP. Learn how to install PHPUnit on Microsoft's operating system, Windows Seven.
Install the Conio2.h package for the Dev-C++ IDE. This package adds functionality for developing applications written in C/C++.
If you've ever faced a problem with mod_rewrite in CakePHP, know that the solution can be quite simple, check out the problem we encountered and solved.
Learn how to install the ZeosLib library in Embarcadero RAD Studio Delphi XE2, this guide will walk you through installation step by step.
In this guide you'll learn how to install the libxml library on Linux operating systems. Download the source code and compile it for your distro.
In this guide you'll learn how to install the zlib library on Linux operating systems. Download the source code and compile it for your distro.
In this guide you'll learn how to install the apache web server on Linux operating systems. Download the source code and compile it for your distro.
Learn to disable the layout and view renderer in Zend Framework so an action in a given controller returns JSON.
dpkg-repack generates a .deb file from the package you have installed, with all its current settings. Create a .deb file of your programs.
Learn to create custom fields for the Joomla 1.6 panel, to do this you must extend a Joomla class that descends from JFormField.
Web pages are developed using plain text, which means you just need to write the code in a simple text-editing program. Learn HTML!
A Web Browser is a program that interprets HTML, CSS, Javascript files, among others.
Learn to solve graphics performance problems on Linux by installing the binary video driver provided by nVidia itself! Worth checking out.
"Case sensitive" is a term indicating that text is sensitive to letter case, meaning it distinguishes between uppercase and lowercase letters.
CamelCase is the practice of writing compound words with their elements joined, without spaces, and the first letter of each element capitalized.
An HTML (HyperText Markup Language) document is a set of instructions in ASCII format used to create hypertext documents that can be viewed in a WWW browser (such as Internet Explorer, Mozilla Firefox, Apple Safari, etc).
The Internet was born in 1969, in the United States. It originally connected research laboratories and was called ARPAnet.
PHP or Hypertext Preprocessor is the most widely used server-side language on the web. Learn a little more about this excellent technology.
XAMPP is a package that includes the main open-source servers available, including FTP, MySQL and Apache with PHP and Perl.
The coordination team of the Santa Catarina State PHP Users Group – PHPSC – is holding PHPSC Conf 2010 in Joinville/SC in partnership with SOCIESC.