You may have seen news coverage today of two serious security flaws discovered in PHP, the programming language estimated to be behind 70% of the world’s websites, including WordPress and WooCommerce. We want to reassure all the clients that we host that we’ve already taken care of it.
What’s the issue?
Security researchers found two critical flaws in PHP that had gone unnoticed for over a decade. In the worst case, they could allow an attacker to run their own code on an unpatched web server without needing a password, which could be used to install malware or take a site down. Because PHP is so widely used, the UK’s National Cyber Security Centre has urged everyone running it to update as a priority.
What we’ve done
Our clients with a Web Application Firewall (e.g. Cloudflare) were never at risk as protective rules were deployed to these ahead of release.
As soon as the patch was available, our team applied it across every server we manage, including those hosting your website and online stores.
Do you need to do anything?
No. If we host your website, you’re protected and your site has stayed online throughout.
If your website is hosted elsewhere and you’re not sure whether it’s been updated, please check with your supplier. And as always, stay alert to unexpected emails asking you to log in or reset passwords, since scammers often use news stories like this as cover.
If you have any questions, please get in touch with your account manager, or our support team.
