PHP security vulnerabilities: a note on our website and user privacy
On October 21, 2026, the PHP project disclosed two critical security vulnerabilities and released fixes. In response to readers’ concerns about website security, we are sharing how ABAB Pedia’s main application is built and how we protect user privacy.
ABAB Pedia’s main application is built with Next.js, React and TypeScript. It does not use the PHP runtime to handle website requests. The two vulnerabilities in the PHP advisory affect that runtime, which is not part of our main application’s technology stack.
Protecting user privacy and data security is a basic requirement of operating our website. We use HTTPS to encrypt pages and requests in transit, along with authentication, role-based permissions and database access controls to restrict access to non-public information. Login email addresses and authentication information are not displayed as part of public contributor profiles. Profile information that users choose to make public, published entries and citations are displayed through the relevant website features.
Security requires ongoing maintenance, and no technology architecture can guarantee zero risk. We will continue to pay attention to security updates for the components we use, prioritize data protection and take user feedback seriously. For privacy questions, requests to correct or delete information, or reports of security issues, contact support@ababpedia.com. Please do not send passwords, verification codes or unrelated sensitive information in emails or public content.