Site is slooooow

[TRG]

Nature will develop better idiots.

God help us.

 

[Scott Greczkowski]

I guess this is what the downtime was about.

 

[Scott Greczkowski]

Just a heads up... I just patched our PHP to close the major PHP exploit announced this morning.

Now on PHP 8.4.27 (cli) (built: Oct 20 2026 00:00:00)

 

[Foxbat]

I saw that, wasn't sure if PHP was employed by XenForo or not.

PHP warns it plans to release 2 emergency patches imminently

Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.

arstechnica.com

 

[Scott Greczkowski]

Yup thats what xenforo is written in, php.

But all patched now.

 

[harshness]

I saw that, wasn't sure if PHP was employed by XenForo or not.

PHP and a heapin' helpin' of JavaScript.

As dated as it is, PHP is eminently adept at projects like a forum. With modules, it is competitive in flexibility and computational efficiency with tools like Node.js or Ruby (where you must choose from many outboard tools).

 

[comfortably_numb]

Related to this?

Critical Flaw Found By AI Puts 70% Of World’s Websites At Risk

www.huffpost.com

 

[harshness]

More specifically, these:

https://www.cve.org/CVERecord?id=CVE-2026-109618

https://www.cve.org/CVERecord?id=CVE-2026-109619

A more scholarly story is here:

PHP warns admins of two critical flaws, emergency patches coming tomorrow

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.

www.bleepingcomputer.com

 

[navychop]

"WARNING Will Robinson!"

 

[Don in CT]

Just a heads up... I just patched our PHP to close the major PHP exploit announced this morning.

Now on PHP 8.4.27 (cli) (built: Oct 20 2026 00:00:00)

When I heard about this exploit I was wondering how quick you would be on it.

 

[Scott Greczkowski]

When I heard about this exploit I was wondering how quick you would be on it.

12 minutes after the patch was release I had it patched.