Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
IT Security NachrichtenOne URL, Three Different Tricks, (Thu, Sep 24th)(24.09.2026 um 08:25 Uhr)
IT Security NachrichtenGartner: 41 Prozent der CISOs melden Deepfakes(24.09.2026 um 08:04 Uhr)
AI & KI NachrichtenJobstart: Rund die Hälfte erwartet KI-Kenntnisse(24.09.2026 um 08:05 Uhr)
AI & KI NachrichtenIT-Dienstleister im Vergleich 2026 - CHIP(24.09.2026 um 01:15 Uhr)
IT Security NachrichtenGefahren durch Berlins exfiltrierte Verwaltungsdaten - IT&Production(24.09.2026 um 02:51 Uhr)
IT Security NachrichtenWeb, Cloud und Security zusammen denken - Swiss IT Magazine(24.09.2026 um 06:56 Uhr)
IT Security NachrichtenAnzeige KI in der IT-Sicherheit für Pentesting und Resilienz - Golem.de(24.09.2026 um 07:20 Uhr)
IT Security NachrichtenOne URL, Three Different Tricks, (Thu, Sep 24th)(24.09.2026 um 08:25 Uhr)
IT Security NachrichtenGartner: 41 Prozent der CISOs melden Deepfakes(24.09.2026 um 08:04 Uhr)
AI & KI NachrichtenJobstart: Rund die Hälfte erwartet KI-Kenntnisse(24.09.2026 um 08:05 Uhr)
AI & KI NachrichtenIT-Dienstleister im Vergleich 2026 - CHIP(24.09.2026 um 01:15 Uhr)
IT Security NachrichtenGefahren durch Berlins exfiltrierte Verwaltungsdaten - IT&Production(24.09.2026 um 02:51 Uhr)
IT Security NachrichtenWeb, Cloud und Security zusammen denken - Swiss IT Magazine(24.09.2026 um 06:56 Uhr)
IT Security NachrichtenAnzeige KI in der IT-Sicherheit für Pentesting und Resilienz - Golem.de(24.09.2026 um 07:20 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

From Prompts to Plays: Using Language Models as Game AI in PHP

OXO, or Tic-tac-toe, is a classic game often played by young children and is known for its simple rules. It involves two players who take turns marking either an X or an O on a 3×3 grid. The first player to align three of their marks …

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

OXO, or Tic-tac-toe, is a classic game often played by young children and is known for its simple rules. It involves two players who take turns marking either an X or an O on a 3×3 grid. The first player to align three of their marks horizontally, vertically, or diagonally wins the game.



I developed a web-based version of Tic-tac-toe using PHP on my personal computer. This version features an AI opponent and leverages language models to determine winning strategies against human players. Let’s take a closer look at how the application works.



I created this application for educational purposes and experimentation. I didn’t use any frameworks on either the backend or the frontend. My goal was to build an application from scratch to better understand the underlying details. It’s not production-ready. I developed it simply to explore possible solutions and approaches. I’m aware that there are many other ways to implement this game, but I wanted to experiment and try my own approach.



On the backend, I used PHP 8.3 in a Docker containerized environment. The game board is managed server-side, and player moves are stored using session storage. On the frontend, I visualized the data using ECMAScript 6 (ES6) JavaScript classes along with HTML and CSS. When the player clicks on a cell, a request is sent to the backend, where the game board is updated, the move is recorded, and an AI assistant is called to select the next move.



The AI uses an LLM (Large Language Model) to evaluate the game state and make decisions. Backend classes are designed to be switchable, PSR-compliant, and follow the separation of concerns principle. I’ve written unit test cases for the backend as well as tests for the frontend.



You can refer to the UML class diagrams to better understand the application's architecture. For the AI model, I used openrouter.ai as the provider and selected a freely available model: deepseek/deepseek-chat-v3-0324. However, the application is flexible and allows other models to be selected via an environment variable.



This project builds on a previous custom application I developed. It's a pet project, created out of curiosity, to explore how PHP can be integrated with LLM-based applications.



Conclusion



The application works well, and I’m able to play Tic Tac Toe using various LLM (Large Language Model) backends. However, I’ve noticed that the quality of gameplay depends heavily on the specific model used. While LLMs can generate responses and simulate moves, they are not always optimal for board game logic. This is likely because LLMs rely on statistical language patterns rather than true game state simulation.



As a result, the AI may struggle with abstract or non-obvious positions and fail to play optimally. It lacks the ability to think ahead or evaluate future game states in a structured way. To improve performance, a more specialized model—or a hybrid approach combining LLMs with traditional game-solving algorithms—may be needed.

SOC Incident Playbook: Vulnerability Remediation & Verification
title: Detect Exploitation - From Prompts to Plays: Using Language Models as Game AI in PHP
id: c6fa5bdc-d934-4d6b-a329-d5ffca542ec8
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "From Prompts to Plays: Using L" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich From Prompts to Plays: Using Language Mo.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten From Prompts to Plays: Using Language Models as Game AI in PHP

Thematisch verwandte Begriffe: From, Prompts, Plays, Using · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96676 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impa…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick