title
there was an RCE exploit found in php, and i’m worried a hacker might cause a canvas type hacking if scratch DOES have php

is php something bad? idk what it is

There's the MediaWiki-based Scratch Wiki, which is currently temporarily closed out of caution. I recall @codubee once saying that the main site's back-end relied on Django for Python (at least the forums do), Node.JS, and Go in response to a comment a while back, but don't quote me on this.

I_wantasheep wrote:

is php something bad? idk what it is

PHP (Hypertext Preprocessor) is kindof like html(?) (markup) and js (prog. lang) and is primarily used to create back-end environments.

Foxofpeace wrote:

does scratch use php in any way

No, for as far as I know, scratch does not use php (quote me on that).

Scratch-WWW does not contain a single PHP file.
Scratch does use PHP but this is repositories from 2013 - 2018 (latest)
ScratchR2 (2.0 pages) is based on Django which uses Python, HTML and other frameworks.
ScratchR (1.0 site) did use some PHP.

Rosics wrote:

Scratch does use PHP but this is repositories from 2013 - 2018 (latest)

Those are all for the wiki.

Rosics wrote:

ScratchR (1.0 site) did use some PHP.

“Used some PHP” is a big understatement here. It was entirely coded in PHP.

DefNotYarrow wrote:

Rosics wrote:

Scratch does use PHP but this is repositories from 2013 - 2018 (latest)

Those are all for the wiki.

Just because it's wiki repositories does not mean it doesn't count.
Scratch used to host the wiki on https://wiki.scratch.mit.edu