You know, I was reading a few posts dissing PHP and I thought, “As annoying as PHP can be, I feel vaguely like defending it,” and then I saw this, and I thought, “I’ll wait for the feeling to pass”
https://cybernews.com/security/php2shell-attacks-php-new-vulnerabilities-found/
I know PHP’s defenders will come out of the woodwork talking about how much has changed in it over the past decade with PHP 7 onward, and yes, it has, but “PHP has stopped being a cargo cult version of Perl and is now a cargo cult version of Java” is not the win they seem to think it is.