<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>guwAPI — Blog</title><description>Articles from guwAPI on building software businesses can rely on: security, APIs, integrations, performance and the responsibility that comes with shipping code.</description><link>https://guwapi.com/blog</link><language>en-us</language><item><title>PHP2Shell: the bug is in PHP itself, not in your code — and that&apos;s what makes it serious</title><link>https://guwapi.com/blog/php2shell</link><guid isPermaLink="true">https://guwapi.com/blog/php2shell</guid><description>PHP2Shell is an unauthenticated RCE in the PHP engine itself. Who is really at risk, how to patch, and how to check whether you&apos;ve already been hit.</description><pubDate>Fri, 23 Oct 2026 00:00:00 GMT</pubDate><category>Security</category><category>Industry</category></item><item><title>Meta&apos;s $16 billion scam-ad problem, and what it asks of people who build software</title><link>https://guwapi.com/blog/meta-16-billion-scam-ads</link><guid isPermaLink="true">https://guwapi.com/blog/meta-16-billion-scam-ads</guid><description>Internal Meta documents projected $16 billion from scam and banned-goods ads. What that says about incentives, and the rules we build software by.</description><pubDate>Thu, 22 Oct 2026 00:00:00 GMT</pubDate><category>Industry</category><category>Security</category></item><item><title>You shipped it in an afternoon. It&apos;s also leaking sessions.</title><link>https://guwapi.com/blog/ai-generated-code-stored-xss</link><guid isPermaLink="true">https://guwapi.com/blog/ai-generated-code-stored-xss</guid><description>AI assistants like Cursor optimise for “it works”, not “it&apos;s safe”. How a single review can steal every visitor&apos;s session, and the three changes that stop it.</description><pubDate>Thu, 01 Oct 2026 00:00:00 GMT</pubDate><category>Security</category><category>AI</category></item><item><title>LeadBase: the AI chat widget and CRM we built to embed on any site</title><link>https://guwapi.com/blog/leadbase-ai-chat-widget-crm</link><guid isPermaLink="true">https://guwapi.com/blog/leadbase-ai-chat-widget-crm</guid><description>LeadBase is an AI chat widget and lightweight CRM you embed on any website. How it works, the decisions behind it, and how it connects to CRMs like GoHighLevel.</description><pubDate>Sat, 28 Feb 2026 00:00:00 GMT</pubDate><category>AI</category><category>Integrations</category></item></channel></rss>