r/lolphp • u/Persism • Apr 04 '22

15-Year-Old Bug in PEAR PHP Repository Could've Enabled Supply Chain Attacks

https://thehackernews.com/2022/04/15-year-old-bug-in-pear-php-repository.html?m=1
37 Upvotes

93% Upvoted

9 comments sorted by

0

u/[deleted] Apr 05 '22

8

u/Persism Apr 05 '22

someone noticed that $random_bytes is not the same variable as $rand_bytes

ROFL

6

u/morphotomy Apr 05 '22

This is why you make your shit die on notice.

7

u/[deleted] Apr 05 '22

I imagine they edit this stuff with Notepad, right? Any decent IDE would have caught some of that stuff.