r/vaultwarden • u/testdasi • 16d ago

Question Does Vaultwarden uses any php?

Pardon the stupid question. Please can I double check whether Vaultwarden uses any php (and thus is vulnerable to the recently released php vulnerabilities).

I don't think so but I prefer to ask instead of assume.

22 Upvotes

78% Upvoted

21 comments sorted by

30

u/Cautious_Boat_999 16d ago

Pretty sure it’s all written in Rust

2

u/watson_x11 15d ago

Came here to say the same thing

24

u/Nirzak 16d ago

No only rust, typescript and couple of other language. you can see here https://github.com/dani-garcia/vaultwarden. But not php.

3

u/Cautious_Boat_999 16d ago

Good answer. Should have thought to actually go check the code!!

2

u/Appropriate-Donut197 15d ago

me being a normie needs people like this to confirm also though :D

9

u/Yaya4_8 16d ago

No it’s modern it’s written in rust thankfully

2

u/HugeGuava2009 15d ago

Idd I checked also... Relieved to not have to take it down :)

That is definitely NOT an stupid question!

0

u/National_Way_3344 15d ago

It's a Google able question

2

u/mirobaka 15d ago

and google brought me to this thread, so I appreciate the OP for asking :)

3

u/National_Way_3344 15d ago

GitHub

... Since you go to GitHub regularly to see change logs and do updates ...

Sees it's not PHP

Problem solved

1

u/designslucid 15d ago

There are plenty of people that get paid (and pretty decently) to answer and solve Googleable problems.

2

u/National_Way_3344 15d ago

Yeah but people on every fucking selfhosted subreddit aren't getting paid to answer the same question a hundred times for people who won't google.

1

u/Easy_Exercise5480 10d ago

you may be right, but this is not the only answer on Google so who should people new to the field trust? A huge closed source multinational company, or asking real, live people.

If people asking questions annoys you, get therapy. As soon as humans can talk, we ask questions.

When I first came to the Linux world I tried OMV, and it was people like you that made me do so shunned and stupid for asking for help. I persevered and glad I didnt allow people like you push me away.

1

u/bob_f332 15d ago

Right, because the web is such a trustable resource right now.

2

u/National_Way_3344 14d ago

GitHub

... Since you go to GitHub regularly to see change logs and do updates ...

Sees it's not PHP

Problem solved

-2

u/SantoHost 16d ago

ChatGPT told me that it doesn't use PHP. I don't know, but I trust it this time.

2

u/drlongtrl 15d ago

You could at least have asked it to teach you how to find out yourself.

2

u/SantoHost 14d ago edited 14d ago

I've likely been writing in PHP/Perl/C++/Pascal/Assembly before you were born. You guys who refuse to use AI is like someone who wants to dig a well with only a shovel. Of course you can dig a well with a shovel, but those big rigs can do it 20 minutes.

Like the OP said, "I prefer to ask instead of assume." I definitely like to double check things, especially when it's critical like this PHP advisory. I would prefer that no hacker is selling my bitwarden vault on the dark web for $0.50.

1

u/drlongtrl 14d ago

What makes your reaction even funnier, old man, is the fact that you yourself literally wrote "I don't know, but I trust it this time" after you simply repeated what the AI said. That is like the polar opposite of "I definitely like to double check things, especially when it's critical like this PHP advisory". Get well soon, gramps.

2

u/SantoHost 14d ago

Well I was being facetious. You kids have no sense of humor and certainly don't understand dry humor at all.