Man, my experience with php was never good. Every php project I've encountered eventually had a monero miner infecting the machine as www-data user.