Bilal Shemsu - Systems Ledger & Production Case Studies

Q: Who is Bilal Shemsu?

Bilal Shemsu is a software engineer, systems builder, and founder based in Ethiopia studying Computer Science at Adama Science and Technology University (ASTU). He specializes in backend services, relational database integrity (MySQL, PostgreSQL), custom PHP Laravel-based architectures, REST APIs, Fastify microservices, and multi-provider AI gateways.

Q: What is Addis Entrance Hub (AEH)?

Addis Entrance Hub (AEH) is a national educational platform and automated delivery engine created by Bilal Shemsu. It serves over 6,000 active secondary students across Ethiopia with curriculum notes, weekly mock exams, and automated scoring analytics handling high traffic.

Q: What is the AfroCoders community?

AfroCoders is a developer and engineering community in Ethiopia and East Africa, founded and led by Bilal Shemsu. The community focuses on software engineering mentorship, architecture discussions, open-source projects, and technical skill development.

Q: What technologies and frameworks does Bilal Shemsu use?

Bilal Shemsu works extensively with PHP (Laravel architecture and custom frameworks), JavaScript/TypeScript (Next.js, React, Node.js, Fastify), relational databases (MySQL, PostgreSQL, SQLite, Drizzle ORM), Docker, Linux server administration, cPanel, and RESTful API engineering.

Q: What certifications does Bilal Shemsu hold?

Bilal Shemsu holds verified certifications from Udacity in Artificial Intelligence Fundamentals, Data Analysis Fundamentals, and Android Developer Fundamentals, as well as an AI Summer Camp completion credential from the Ethiopian Artificial Intelligence Institute (EAII).

Bilal Shemsu

LOG.001/Thoughts

7 min read•Oct 2026

When the Runtime Breaks: Inside the PHP2Shell Panic and Why Good Code Was Not Enough

Why the latest critical security bug shook the web, how simple memory limits turned into root server access, and what ten years of server fires teach us about real defense.

A clear breakdown of the PHP2Shell security bug (CVE-2026-109618 and CVE-2026-109619), how memory cleanup failures create dangerous open doors, and why clean application code cannot protect you when the engine underneath fails.

PHP SecurityZend EngineCVE-2026-109618+3

READ ENTRY

Technical Journal & Notes

When the Runtime Breaks: Inside the PHP2Shell Panic and Why Good Code Was Not Enough