diff --git a/bin/publish-latest-branch-build.php b/bin/publish-latest-branch-build.php
index 1278cb9..a91df05 100755
--- a/bin/publish-latest-branch-build.php
+++ b/bin/publish-latest-branch-build.php
@@ -1,251 +1,249 @@
 #!/usr/bin/env php
 <?php
 ################################################################
 # This script is supposed to be executed by Phorge's Harbormaster,
 # from the directory of the leased working copy, on top of the
 # desired commit.
 #
 # Algorithm:
 #   - read the secret environment variables
 #   - for each APK:
 #     - make fingerprint
 #     - sign APK
 #     - move to the HTTP area
 #   - finally, if we are on a patch page:
 #     - publish a nice comment on Phorge on the patch page
 ################################################################
 
 // Die violently in case of any errors.
 require __DIR__ . '/../include/autoload.php';
 
 // Get environment variables.
 // These environment variables are very secret and passed to this script
 // using traditional Unix variable export.
 // These variables SHOULD be stored in a file that has very hardened permissions like
 // chmod 600, or similar.
 // Note that this PHP script does not know the .env filename. We just receive the env vars.
 // We die violently if a env variable does not exist (or if it's empty).
 $KEYSTORE_PATH       = require_env('KEYSTORE_PATH');       // to sign the APK files
 $KEYSTORE_PASSPHRASE = require_env('KEYSTORE_PASSPHRASE'); // to sign the APK files
 $TELEGRAM_BOT_TOKEN  = require_env('TELEGRAM_BOT_TOKEN');  // to publish the Phorge comment
 $TELEGRAM_CHAT_ID    = require_env('TELEGRAM_CHAT_ID');    // to publish the Telegram comment
 
 // Set he pathname to the repository built apk file(s).
 $APK_PATH_GENERIC = './app/build/outputs/apk/gitpull/*.apk';
 
 // Set the expected base URL for the published APK files and its webroot path on the filesystem.
 $EXPECTED_DEPLOY_URL = 'https://lab.reyboz.it/builds/libre-busto/';
 $EXPECTED_DEPLOY_PATH = '/home/www-data/reyboz.it/lab/builds/libre-busto';
 
 // The first argument of the script is the Differential ID number,
 // or empty if we are a generic commit.
 $phorge_differential_id = $argv[1] ?? null;
 
 // Show the current directory.
 // This is supposed to be a /var/drydock/repo/something and it's automatically
 // created by Harbormaster during the repository leasing.
 print_log_info(sprintf(
 	"Current directory: %s",
 	getcwd()
 ));
 
 // Get the branch name, and the Phorge document id of the page to be commented.
 $phorge_document_id = '';
 $branch_name = null;
 if ($phorge_differential_id) {
 	// We are coming from a Differential revision page.
 	// The first argument is "123", that is, the "D123" revision page.
 	// We assume that as branch name, to create nice APK names.
 	$branch_name = 'D' . $phorge_differential_id;
 	$phorge_document_id = $branch_name;
 } else {
 	// We are coming from a generic commit, not created from Differential.
 	// Get the git ref name (probably "HEAD").
 	$remote_shit = shell_line('git', [
 		'name-rev',
 		'--name-only',
 		'HEAD',
 	]);
 	$branch_name = basename($remote_shit);
 }
 
 // Get the git commit hash and title.
 // TODO: get also the author name.
 $git_commit = shell_line('git', [
 	'rev-parse',
 	'HEAD',
 ]);
 $git_commit_title = shell_line('git', [
 	'show',
 	'--pretty=format:%s',
 	'-s',
 	'HEAD',
 ]);
 
 // Find every single APK and generate core info.
 $generated_apks = [];
 
 // No APK, no party.
 $apk_founds = glob($APK_PATH_GENERIC);
 if (!$apk_founds) {
 	print_log_error("No APK Founds. WTF!?");
 	exit(1);
 }
 
 // Process every single APK.
 foreach (glob($APK_PATH_GENERIC) as $apk_path) {
 
 	// Build a "branch-apk-amd64.apk" filename.
 	$apk_filename = basename($apk_path);
 	$apk_realpath = realpath($apk_path);
 	$apk_destination_name = "${branch_name}-${apk_filename}";
 
 	// Set destination APK URL and path.
 	$apk_destination_file = $EXPECTED_DEPLOY_PATH . '/' . $apk_destination_name;
 	$apk_destination_url  = $EXPECTED_DEPLOY_URL  .       $apk_destination_name;
 
 	// Calculate the signature. This may take some time.
 	print_log_info("APK {$apk_path}: calculating sha256sum...");
 	$apk_sha256 = hash_file('sha256', $apk_path);
 
 	// Show some internal info for the log.
 	print_log_info("APK {$apk_path}: calculating sha256sum... completed. Info:");
 	echo "  APK original:         ${apk_path}\n";
 	echo "  APK sha256:           ${apk_sha256}\n";
 	echo "  APK destination name: ${apk_destination_name}\n";
 	echo "  APK destination path: ${apk_destination_file}\n";
 	echo "  APK destination URL:  ${apk_destination_url}\n";
 
 	// Expose in the web directory.
 	// Note that this overwrites the destination.
 	print_log_info("APK {$apk_path}: copying to HTTP deploy destination");
 	copy($apk_path, $apk_destination_file);
 	print_log_info("APK {$apk_path}: published in $apk_destination_url");
 
 	$apk_signed_aligned = add_file_suffix($apk_destination_file, '-signed');
 	$apk_aligned        = add_file_suffix($apk_destination_file, '-aligned');
 
 	print_log_info("APK {$apk_path}: running zipalign");
 	$apk_zipalign_command = sprintf(
 		'~/bin/zipalign -p -f -v 4 %s %s',
 		escapeshellarg($apk_destination_file),
 		escapeshellarg($apk_aligned)
 	);
 	passthru($apk_zipalign_command);
 
 
 	// Signing APK
 	echo "Signing APK\n";
 	$apksignerCommand = sprintf(
 		'~/bin/apksigner sign --ks %s --out %s --ks-pass pass:%s %s',
 		escapeshellarg($KEYSTORE_PATH),
 		escapeshellarg($apk_signed_aligned),
 		escapeshellarg($KEYSTORE_PASSPHRASE),
 		escapeshellarg($apk_aligned)
 	);
 	passthru($apksignerCommand);
 	print_log_info("Sign concluded");
 
 	// Remember this APK later and its signature.
 	$generated_apks[] = new APK($apk_destination_name, $apk_destination_url, $apk_sha256);
 }
 
 // pathname to the git show file in the HTTP build directory
 $BUILD_GIT_SHOW_FILE = $EXPECTED_DEPLOY_PATH . '/' . $branch_name . '-git-show.txt';
 
 // overwrite the latest git show for this branch name (force date update)
 if (file_exists($BUILD_GIT_SHOW_FILE)) {
     unlink($BUILD_GIT_SHOW_FILE);
 }
 file_put_contents($BUILD_GIT_SHOW_FILE, shell_exec('git show'));
 
 // update checksums
 chdir($EXPECTED_DEPLOY_PATH);
 unlink('sha1sum.txt');
 shell_exec('sha1sum * > sha1sum.txt');
 chdir('..');
 
 $apix = '`';
 
 // add a comment to the build URL
 if (!empty($phorge_document_id) && empty(getenv('NO_COMMENT'))) {
 	// We have a Differentials revision under review!
 	$phorge_document_id_escaped = escapeshellarg($phorge_document_id);
 
 	$phorge_comment_header_lines = [
 		"⚙ Dear Android hackers, please review this promising patch:",
 		"https://gitpull.it/$phorge_document_id_escaped",
 		"",
 		"Here the related fresh test builds:",
 	];
 
 	// Build Phorge comment.
 	// There is a fixed header, and multiple lines about each APK.
 	$phorge_apk_lines = [];
 	foreach ($generated_apks as $generated_apk) {
 		foreach ($generated_apk->getPhorgeCommentLines() as $apk_line) {
 			$phorge_apk_lines[] = $apk_line;
 		}
 	}
 	$telegram_chat_content = implode("\n", array_merge([
 		$phorge_comment_header_lines,
 		$phorge_apk_lines,
 	]));
 
 	// Send message to Telegram groups.
 	echo "DEBUG TELEGRAM CONTENT\n";
 	echo "$telegram_chat_content\n";
-	shell_exec(sprintf(
-		"~/bin/telegram-comment.sh %s %s %s",
-		escapeshellarg($TELEGRAM_BOT_TOKEN),
-		escapeshellarg($TELEGRAM_CHAT_ID),
-		escapeshellarg($telegram_chat_content)
-	));
+
+	// Send message to Telegram.
+	TelegramStupidSDK::createFromBotToken($TELEGRAM_BOT_TOKEN)
+	  ->sendMessageToChat($telegram_chat_content, $TELEGRAM_CHAT_ID);
 
 	// Send message to Phorge.
 	echo "Adding bipbop Comment to $phorge_document_id\n";
 	shell_exec(sprintf(
 		"~/bin/phab-comment.php %s %s %s",
 		escapeshellarg($phorge_document_id),
 		escapeshellarg($apk_destination_url),
 		escapeshellarg($apk_sha256)
 	));
 } else {
 	// We have NOT a Differentials revision under review!
 	// So this is an atomic commit.
 	$git_commit_title_escaped = escapeshellarg($git_commit_title);
 
 	$telegram_chat_content = implode("\n", [
 		"🌚 New commit: *$git_commit_title_escaped*",
 		"https://gitpull.it/R4:$git_commit",
 		"",
 		"Try this fresh test APK:",
 		"[Download $apk_destination_name_escaped]($apk_destination_url_escaped)",
 		"",
 		"APK fingerprint sha256:",
 		"$apix$apk_sha256$apix"
 	]);
 
 
 	echo "DEBUG TELEGRAM CONTENT\n";
 	echo "$telegram_chat_content\n";
 	shell_exec(sprintf(
 		"~/bin/telegram-comment.sh %s %s %s",
 		escapeshellarg($TELEGRAM_BOT_TOKEN),
 		escapeshellarg($TELEGRAM_CHAT_ID),
 		escapeshellarg($telegram_chat_content)
 	));
 }
 
 // delete very old files
 print_log_info("Cleaning old artifacts");
 shell_exec(sprintf(
 	"find %s -type f -mtime +120 -delete",
 	escapeshellarg($EXPECTED_DEPLOY_PATH)
 ));
 
 // clean old APK in the repository to never re-use it by mistake
 // as it happened when we moved everything to the /app directory
 unlink($apk_path);
 
 print_log_info("Done");
diff --git a/bin/telegram-comment.sh b/bin/telegram-comment.sh
deleted file mode 100755
index 5b9f114..0000000
--- a/bin/telegram-comment.sh
+++ /dev/null
@@ -1,27 +0,0 @@
-#!/bin/sh -e
-
-# TODO: avoid this file. Rewrite in PHP.
-
-if [ -z "$1" ]; then
-	echo "Missing Telegram Bot ID"
-	exit 1
-fi
-
-if [ -z "$2" ]; then
-	echo "Missing Chat ID"
-	exit 1
-fi
-
-if [ -z "$3" ]; then
-	echo "Missing message text"
-	exit 1
-fi
-
-echo "TELEGRAM COMMENT" "$3"
-exit
-
-curl \
- --data parse_mode=MarkdownV2 \
- --data chat_id="$2" \
- --data text="$3" \
- --request POST https://api.telegram.org/bot"$1"/sendMessage
diff --git a/include/TelegramStupidSDK.php b/include/TelegramStupidSDK.php
new file mode 100644
index 0000000..3090f0c
--- /dev/null
+++ b/include/TelegramStupidSDK.php
@@ -0,0 +1,97 @@
+<?php
+/**
+ * Yet another stupid Telegram SDK.
+ */
+class TelegramStupidSDK {
+
+	private $botToken;
+
+	/**
+	 * Constructor from the bot token.
+	 */
+	public function __construct(string $bot_token) {
+		$this->botToken = $bot_token;
+	}
+
+	/**
+	 * Get an action URL.
+	 */
+	private function getActionURL(string $action): string {
+		return "https://api.telegram.org/bot{$this->botToken}/{$action}";
+	}
+
+	/**
+	 * Send a Telegram message to a Chat ID.
+	 */
+	public function sendMessageToChat(string $message, int $chatId) {
+		// Prepare the URL for the Telegram API.
+		// Initialize cURL.
+		$url = $this->getActionURL('sendMessage');
+		$ch = curl_init($url);
+
+		// Prepare the data to be sent
+		$message_safe = $this->escapeMessage($message);
+		$data = [
+			'parse_mode' => 'MarkdownV2',
+			'chat_id' => $chatId,
+			'text' => $message_safe,
+		];
+
+		// Set cURL options
+		curl_setopt($ch, CURLOPT_POST, true);
+		curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
+		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+
+		// Execute the request
+		$response = curl_exec($ch);
+
+		// Check for errors
+		if (curl_errno($ch)) {
+			throw new Exception(sprintf(
+				"Error running cURL: %s",
+				curl_error($ch)
+			));
+		}
+
+		// Close cURL session
+		curl_close($ch);
+
+		// Return the response
+		return $response;
+	}
+
+	/**
+	 * Handy constructor, with a nice name.
+	 */
+	public static function createFromBotToken(string $bot_token): TelegramStupidSDK {
+		return new self($bot_token);
+	}
+
+	/**
+	 * Escape a Telegram message body.
+	 * https://core.telegram.org/bots/api
+	 * «Any character with code between 1 and 126 inclusively can be escaped anywhere with a preceding '\' character,
+	 *  in which case it is treated as an ordinary character and not a part of the markup.
+         *  This implies that '\' character usually must be escaped with a preceding '\' character.»
+	 */
+	private function escapeMessage(string $input) {
+		$escapedString = '';
+
+		// Iterate through each character in the input string
+		for ($i = 0; $i < strlen($input); $i++) {
+			$char = $input[$i];
+			$asciiValue = ord($char);
+
+			// Check if the ASCII value is between 1 and 126
+			if ($asciiValue >= 1 && $asciiValue <= 126) {
+				// Escape the character by prepending a backslash
+				$escapedString .= '\\' . $char;
+			} else {
+				// If not in the range, just append the character as is
+				$escapedString .= $char;
+			}
+		}
+
+		return $escapedString;
+	}
+}
diff --git a/include/autoload.php b/include/autoload.php
index 8edbd24..be4bd05 100644
--- a/include/autoload.php
+++ b/include/autoload.php
@@ -1,13 +1,14 @@
 <?php
 
 // Die in case of any errors.
 declare(strict_types=1);
 error_reporting(E_ALL);
 ini_set('display_errors', '1');
 
 // Load useful functions.
 require 'functions.php';
 
 // Load some useful classes.
 require 'APK.php';
 require 'CommandResult.php';
+require 'TelegramStupidSDK.php';