Greetings, Moonbats! I hope you are all well!
Today, I logged into Bluesky to find "PHP vulnerabilities take Websites offline" in the "Trending" sidebar. Now, since I am in charge of two PHP-based Websites, I was understandably concerned and immediately read up on the topic. (You can find links in the "Resources" section of this post.)
Fortunately, the hosting provider I used has upgraded the PHP version it uses to the latest one, which contains the relevant patch(es). If you run a Website that uses PHP, here's how you can check for issues (as per the email they sent me):
-
Upgrade your version of PHP to the latest one (8.5.12) if you haven't already done so.
-
Review your CMS administrator accounts and installed plugins or extensions, taking note of any you don't recognise.
-
Check your Website files for unfamiliar or recently modified files, particularly in upload directories.
-
Change your Website administrator and FTP passwords if you haven't done so recently, and enable two-factor authentication where available.
-
As a general precaution, update your website's CMS, plugins, themes and other software to the latest versions.
-
Check for scheduled tasks (cron jobs) you don't recognise.
