The people who say "those who still use PHP deserve it" are the most dangerous
「PHPなんて使ってるやつが悪い」と言っている輩が一番危ない（忠实译意：说“还用PHP的人活该”的人才最危险）
A Qiita author wrote an article rebutting the claim after the PHP2Shell incident that "the people who use PHP are to blame," arguing that the incident's real significance is that AI can now rapidly weaponize memory vulnerabilities dormant in the C/C++ runtime. The timeline the author lays out states that this flaw (CVE-2026-109618 / CVE-2026-109619) was noticed by PHP core developers as early as 2024 but no attack path could be found; in the summer of 2026, security researchers used source-code analysis with models such as GPT-5.6 Sol to turn it into a usable remote code execution attack chain, and another large security company also independently discovered and verified it using an AI agent; after information about the attack chain leaked in October, PHP rushed out a release one day early.