Skip to main content

Open source project

PHP

PHP is a server-side scripting language for web application development and dynamic content generation.

What is PHP?

PHP is a general-purpose scripting language (application development) primarily designed for server-side web development (web application runtime) and embedded in HTML.

  • Server-side scripting language for HTTP-based applications (web application runtime)
  • Execution engine and standard library for building dynamic web pages and APIs (application development)
  • Integrations with multiple relational databases and services through extensions (data access)
  • Support for both procedural and object-oriented programming models (software engineering)
  • Rich ecosystem of frameworks, libraries, and tools maintained under The PHP Foundation (application platform)
More about PHP

More About PHP

PHP is a widely used open-source scripting language (application development) optimized for server-side execution in web environments. It is designed to be embedded directly into HTML, enabling developers to generate dynamic content, process form data, manage sessions, and integrate with backend services over Hypertext Transfer Protocol (HTTP). PHP is executed on the server by the PHP runtime, which interprets PHP code and returns rendered output, typically HTML or JSON, to clients such as web browsers or Application Programming Interface (API) consumers.

The PHP runtime provides a core engine (application runtime) and an extensive standard library, covering string handling, date and time processing, file and stream access, cryptographic operations, and network communication. PHP also exposes a structured extension system (runtime extensibility) that allows integration with databases such as MySQL, PostgreSQL, and others via standardized interfaces, as well as connectivity to external systems and protocols. The language supports both procedural and object-oriented paradigms, including classes, interfaces, traits, namespaces, and exceptions, which enables modular application design and reuse.

In enterprise and institutional environments, PHP is used to implement content management systems, customer-facing web portals, business applications, and internal tools (business application platforms). It runs on common web servers, including Apache HTTP Server and Nginx, and is typically deployed with PHP-FPM or other SAPI integrations (web server integration). PHP is compatible with major operating systems such as Linux, Windows, and macOS (cross-platform runtime), which supports heterogeneous infrastructure strategies across on-premises (on-prem) and cloud environments.

PHP maintains compatibility with common web standards such as HTTP, HTTPS, cookies, and session handling (web protocol integration). It interoperates with external services through RESTful APIs, Simple Object Access Protocol (SOAP), and other network protocols where supported by extensions (system integration). The ecosystem includes frameworks and libraries focused on MVC patterns, dependency management, testing, and deployment, which align with enterprise software engineering and DevOps practices (software lifecycle tooling).

The PHP project is overseen by The PHP Foundation, which coordinates development, maintenance, and Long Term Evolution (LTE) of the language and runtime (open-source governance). For enterprise stakeholders, PHP functions as a stable application platform in the web and API layer, suitable for line-of-business systems, integration front-ends, and content-driven sites. In a technical taxonomy, PHP is classified as a server-side scripting language and runtime for web application development, fitting into application platforms, web middleware, and backend service layers.

Our description of PHP. Updated February 2026.

Who uses and builds on it

Companies that coverage ties to this project, by number of articles.

Recent coverage

Oct 2026 Vendors Release AI Agent Tools and Physical AI Platform Updates - Week of October 26, 2026 Weekly roundup covering AI agent tools, automotive semiconductors, AI infrastructure partnerships, network coverage, and security research updates. Blog post · Oct 2026 · Source: kb.cert.org PHP memory flaws may allow remote code execution Two PHP memory flaws affecting versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 may allow remote code execution. Blog post · Oct 2026 · Source: kb.cert.org Shopware 6.7 XSS flaw in media uploads enables admin token theft Shopware 6.7 has a stored XSS flaw in media uploads that can lead to admin credential compromise and remote code execution.