X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub
Profile banner

Daniel Brendel

@[email protected]

Senior Software Developer | Project Founder | Science-centered Humanist 🌟
💻 Software Development
🌳 Nature Photography
💚 Mental Health Awareness
I like bumblebees a lot. 🐝

Open remote profile ↗
Posts

SayText Chat v1.0 is now published 🚀

Ever wanted to chat like you're playing Counter-Strike 1.6 again? Now you can! 🥳

With this retro chat app, you can send text messages as CT, T or SPEC, issue radio commands, or let the VOX speech system speak on your behalf! 💬

There is also a leetspeak transformer, and various background images available. 💡

➡️ Check it out:
https://github.com/danielbrendel/saytext-chat

#FOSS #SelfHosted #SelfHosting #OpenSource #WebDev #Retro #Nostalgia #Counterstrike #Halflife #Vintage

Screenshot showing an active SayText Chat session with 5 participants. The chat window contains random text messages, radio commands and VOX speak commands. There is a list of active users, as well as the current user count. Input fields for name, text message and team are shown in the bottom. In the title section, there is the server name and server topic, the latter allowing BBCodes.First third of the SayText Chat homepage, showing a banner, description and background image.Second third of the homepage showing a list of active chat servers with their name, topic, user count and preview image.Third third of the homepage showing a list of features, short infos on self-hosting along with a link to the docker instructions, and a footer with various links/socials.
GitHubGitHub - danielbrendel/saytext-chat: Chat like you're playing CS 1.6 againChat like you're playing CS 1.6 again. Contribute to danielbrendel/saytext-chat development by creating an account on GitHub.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
↳ In reply to a post

New docker image for HortusFox v6.4 is now live! 😊

A big thanks to @thephpf for working so hard on the PHP patches. And everyone involved building docker images, posting news, supporting maintainers, and updating their own projects. You did an awesome job today!

What a #Spooktober indeed. We all deserve some rest now. 😴

Good night everyone. See y'all tomorrow. 💚

#PHP #FOSS #OpenSource #SelfHosted #SelfHosting #PHP2Shell #InfoSec

Photo with plants in the background, containing the following text in the front:

A big thanks from HortusFox to all who worked so hard to resolve
PHP2Shell.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
↳ In reply to a post

Docker image is in the making ‼️

➡️ Monitor the release here:
https://github.com/danielbrendel/hortusfox-web/releases/tag/v6.4

If you use the unaltered dockerfile, please update your workspace as soon as possible once the image build has finished.📢

#FOSS #OpenSource #SelfHosted #SelfHosting #PHP #PHP2Shell #InfoSec #HortusFox

GitHubRelease v6.4 · danielbrendel/hortusfox-webVersion 6.4 of HortusFox Changelog: Pinned php-apache to 8.3.36 in the dockerfile to remedy the critical PHP2Shell vulnerability (db45a24) Fixed GHSA-rp72-2fvw-58g4 Fixed XSS vulnerability in task...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Update regarding HortusFox 📢

👉 In the default dockerfile, PHP will be pinned from 8.3.0 to 8.3.36.

👉 Also added a fix to handle response codes properly returned from the HortusFox homepage in the context of version checks

👉 The HortusFox official homepage is still offline, no further response from my hoster. They are sadly very unresponsive.

I will publish the patch very soon. 🩹

#FOSS #OpenSource #SelfHosted #SelfHosting #HortusFox #PHP2Shell #InfoSec

↩ Reply ♡ 0 · ↻ 0 ↗ Original
↳ In reply to a post

You know things get serious when even the german Tagesschau publishes news on the subject:

https://www.tagesschau.de/wirtschaft/technologie/it-sicherheit-php-luecke-100.html

Meanwhile, the PHP Group published the fixes:
https://github.com/php/php-src/releases/tag/php-8.5.12

#PHP #PHP2Shell #InfoSec #SysAdmin #OpenSource #SelfHosted

tagesschau.deProgrammiersprache PHP: Sicherheitslücke bedroht weltweit WebseitenZahlreiche Webseiten und Onlinedienste weltweit sind derzeit in Gefahr: Grund ist eine Sicherheitslücke in der weitverbreiteten Programmiersprache PHP. Das Gefahrenpotenzial ist demnach extrem hoch.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
↳ In reply to a post

As a measurement of caution, all my websites have now been turned offline until further notice.

I'm currently communicating with my hoster on how fast they can apply a patch when released.

For HortusFox users, this means your workspace cannot check for new updates, or share images with the hortusfox.com backend.

All my platforms will be back online as soon as the situation is resolved.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

I don't like waking up to a possible internet collapse...

There seems to be two critical RCE vulnerabilities discovered in PHP.

If you are using HortusFox, please make sure it's not accessible from the public Internet. I will monitor the situation and see if I have to take any action when the security patches are live.

More infos:
https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

#PHP #Security #RCE #PHP2Shell #Warning

Ars TechnicaPHP warns it plans to release 2 emergency patches imminentlyUnconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
↩ Reply ♡ 0 · ↻ 0 ↗ Original