I tried this more simplistic variant https://pastebin.com/kggc4q1T which supposedly would crash php but it was rejected by my CSRF middleware...

▲

afdbcreid 6 hours ago | parent | next [-]

If you maintain a 9 figures business, I would recommend to not rely on that and shut it down or at least do more.

▲

system2 3 hours ago | parent [-]

A 9-figure business with PHP is mind-boggling.

▲

normie3000 3 hours ago | parent [-]

Wait til you hear about The Facebook.

	▲	dan15 2 hours ago \| parent [-]
		Facebook hasn't used PHP for a very long time. It's been using Hack for over 12 years, which was initially based off PHP but it's deviated quite significantly now. It's now nearly entirely statically-typed, and has a bunch of features that PHP doesn't have. IO is fully asynchronous using async/await syntax (like C# or JavaScript), functions can be marked as pure, and a bunch of other things useful in large codebases. It still uses the same request model as PHP, since that's genuinely useful for web requests. It's easier to avoid memory leaks if each request is entirely self-contained and there's no global state persisted between requests (other than APC and opcode caches)

▲

dvdkon an hour ago | parent | prev | next [-]

I tried it too in a clean Debian Trixie container and got no crash.

▲

sznio 5 hours ago | parent | prev | next [-]

then you need to use a correct csrf token. it doesn't protect against this, anyone can get a valid csrf token, every visitor gets one.

▲

brazzy 3 hours ago | parent | prev [-]

This link gets me a shitton of extremely intrusiv ads, some of which look like malware (auto-downloading an "OperaSetup.exe"). Is pastebin already compromised?

▲

tikotus 2 hours ago | parent [-]

I got this same earlier, but now it seems to be working. Perhaps just an oddly timed bug with some ads that has nothing to do with the incident?

	▲	td4 an hour ago \| parent [-]
		Pastebin is just sketchy for a while now it now serves ads that instantly start those downloads its been like that for a couple of weeks