Is there any chance PHP developers themselves implement backdoors in PHP core? Are sure about this part : If you are afraid in backdoors, download the source, read it and compile it yourself. There was a backdoor in linux kernel in 2003 just by three lines of code and interestingly it was looking like a typographical mistake. Who on earth would look at the whole code in PHP!!!