my take on the php thing? its been riddled with severe security issues for 20+ years. you're still using it why?
XFEDI
ActivityPubConversation
similar to wordpress. they have 0days several times a year. stop using bad software that doesn't care about security and never learns.