[ircmaxell]

The only implementations of bcrypt (and crypt(3)) that I've seen that's NOT vulnerable to this are Golang and Python.

It has nothing to do with PHP...