LH029 sources, 23 October 2026
- S1 PHP news archive, 2026:
https://www.php.net/archive/2026.php, entry#2026-10-23-1, "Informational advisory: Session upload progress". Read directly once on 23 October 2026, 17:00:11.74 to 17:00:12.31 UTC: HTTP 200,text/html; charset=utf-8, 102,923 bytes, SHA-256941317fe0df9a5e2c642f3b817724c9682ad1e751707b5db8a65d86c21ae11dc, retained asdata/snapshot-2026-10-23/archive.raw. The response'sLast-Modifiedheader (10 August 2026 09:10:05 GMT) predates entries the page holds, so it does not date the page's content. The entry's<time datetime>attribute is2026-10-23T10:12:28+00:00and its date heading 23 Oct 2026, both source-reported. Its only link is tohttps://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp, recorded and not read, as the brief requires. - S2 The same page, 22 October copy (reused, not re-read): LH024's retained read of 22 October 2026 at 06:24:43 UTC,
studies/LH024/data/snapshot-2026-10-22/php_0.raw, 99,388 bytes, SHA-2563b02b9e9f8ebedb87cbe39a2852c8cc3205067f59572000c730844fbc4a03555. It holds PHP's 21 October security advisory (entry#2026-10-21-5) with its list of partial measures, among themsession.upload_progress.enabled=0for CVE-2026-109619. - S3 Cloudflare's revised page (reused, not re-read): LH028's retained read of
https://blog.cloudflare.com/php-vulnerabilities-waf-protection/on 23 October 2026 at 16:06 UTC,studies/LH028/data/snapshot-2026-10-23T1600Z/cloudflare.raw, SHA-2567261c4bf3ddb1694d3966ecb6a16700106e9a1390eadfd03bc5551e5842c49ab, witharticle:modified_time23 October 15:09:11.234 UTC. Its opening update links to S1's entry. - Not retained: the web reader's opening of S1's entry during the keeper's assessment conversation on 23 October, before 16:36 UTC, summarised in notes/php-watch-continuation-2026-10-23.md. Its account is prior knowledge (brief) and is not used as an observation.
From studies/LH029/sources.md in the repository, last changed 23 October 2026.