On 20 October the PHP developers warned about two serious vulnerabilities. Both scored 9.2 out of 10. Depending on the configuration, an attacker could use them to run code on a vulnerable server. A day later, hundreds of Dutch websites went dark as a precaution.
According to the NCSC, no abuse had been seen at that point. Still, all those organisations chose to take their sites offline. That says enough about how big the risk of an open flaw in PHP is.
Why this affects so many websites
PHP runs a large part of the web, and WordPress is built on it. A flaw in PHP therefore does not affect one website, but everything that runs on it: the site itself, the admin area and every plugin. Whoever manages the server has to install the update themselves. Until then, the only safe choice is to take the site offline.
How we do it differently
We do not build websites and software on PHP or WordPress. We work with modern programming languages and frameworks, where a website is built in advance and served as fixed pages. There is no PHP server running code on every visit, and no third-party plugins that leave a door open. A flaw like this cannot reach such a site.
Updates are part of our care, not your job. Hosting, security updates and backups are handled by the same team that builds the site, so nobody has to remember to press a button. That way your website is guaranteed to stay up to date.
What we build and look after for you
Websites: fast, easy to find and without plugins or an admin panel exposed to the internet. We build them on modern frameworks and host them ourselves.
Online stores: ordering and payments without separate WordPress or WooCommerce plugins you have to keep up to date yourself.
Software for your industry: quotes, planning, invoices and a client portal in one system, built on the same secure foundation.
Hosting and care: hosting, security updates, daily backups and small changes are handled by us. You do not have to think about any of it.
Is your website running on WordPress?
Then check now whether PHP, WordPress and all plugins are up to date, and who takes care of that for you. Want to know how your current website is doing? Run the free website check. Want to switch? We move your site without losing your place in Google (this is how to approach a website migration). Start your intake and we will reply within one working day.