Qbix/proxy

Simple web server proxy to protect PHP code bases from known vulnerabilities.

6 mentions on Hacker News by 3 people: 2 stories, 4 comments · first 2026-10-21 · latest 2026-10-22

Mentions per year 6 mentions · busiest year 2026 (6)

20082026

All Stories Comments Newest Top Oldest

…the author force pushed to hide the history, failed to fix the vulnerabilities pointed out (e.g. https://github.com/Qbix/proxy/blob/5a9f8a96f4bdaaaa5444b6986... still doesn't match the PHP multipart parser, so the whole defense can be…
comment by mirashii · 2026-10-22 · in Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
▲ 2
Alternative way to block php2shell attacks for those who can't patch their PHP
story by EGreg · 2026-10-22 · 0 comments
…| 0 comments 1792590090 | Simple Proxy to secure your PHP from vulnerability CVE-2026-109618 | https://github.com/Qbix/proxy | https://news.ycombinator.com/item?id=50180810 | 0 comments 1792590108 | PHP Security advisory: Critical remote…
comment by 1vuio0pswjnm7 · 2026-10-21 · in PHP2Shell: AI uncovers critical RCE in PHP
…between nginx or apache and your PHP-FPM, to sanitize inputs and prevent this (and other) attacks: https://github.com/Qbix/proxy
comment by EGreg · 2026-10-21 · in PHP 8.2.35
…pass it through unchanged to the upstream. That's a full bypass of what the proxy is trying to do. https://github.com/Qbix/proxy/blob/main/src/sanitize.c#L41 https://github.com/php/php-src/blob/master/main/SAPI.c#L162 The article linked…
comment by mirashii · 2026-10-21 · in PHP 8.2.35
▲ 1
Simple Proxy to secure your PHP from PHP2Shell vulnerability
story by EGreg · 2026-10-21 · 0 comments