Alexandre Daubois
Alexandre Daubois will be speaking at our 2026 conference.
Buy TicketsSee 2026 Speakers
Alexandre Daubois
Alexandre is the CTO at Les-Tilleuls.coop and a leading figure in the PHP ecosystem.
A major player in the open-source world, he is an active member of the Symfony and FrankenPHP Core Teams and a core maintainer of the PHP language itself. His expertise in crafting robust, high-quality code is distilled in his book, "Clean Code in PHP".
As an international speaker at conferences like SymfonyLive and ForumPHP, Alexandre shares his deep insights on topics ranging from cybersecurity to object-oriented programming theory, all connected by a common thread: designing maintainable software for the decades to come.
Sessions in 2026
Know Your Enemies: Live Exploit of a PHP Engine Security Breach
Walbrook - 10.15
All programming languages have their foundations: the engine that interprets your code and makes everything run. In PHP, this is the Zend Engine, a critical piece of software that powers millions of applications worldwide. When everything works, you don't even think about it. You deploy to production, and the engine does its magic behind the scenes.
But what happens when something goes wrong in that core? What if a subtle bug opens the door to a full security breach? Suddenly, the invisible foundation becomes the most important part of the story.
Let's shine a light on two such cases: a recent, real vulnerability in the PHP engine (which has since been patched), and a backdoor that, just a few years ago, actually made it into the release candidate and allowed remote code execution. We'll walk through how each issue could be exploited and, most importantly, what lessons developers can draw from them. And yes, there will be live, local, sandboxed demos of both exploits in action. Ready to dive in?