PHP2Shell Anyone affected?

[Roid Rage]

think most IT gotta OT these few days.

Dunno VIjay patched hwz already bo since it runs on xenforo

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151/

 

[firestyle]

Heng me only use php to run local scripts.

However those hosting php servers, better quicky go patch it.

 

[Roid Rage]

Heng me only use php to run local scripts.

However those hosting php servers, better quicky go patch it.

just now scroll FB many malaysia gov services kana liao

OCBC down just now dunno if it's related.

wahaha freak show. maybe it's time PHP finally dies

 

[firestyle]

just now scroll FB many malaysia gov services kana liao

OCBC down just now dunno if it's related.

wahaha freak show. maybe it's time PHP finally dies

Mai la...quite like php as it's light weight and interpreter based with good pattern matching capabilities.

No computing language is foolproof.

 

[Amaterasu]

Basically just upgrade to the later versions can patch the vulnerability already right ?

 

[bakasora]

Why companies so kan cheong even though the system is not hosted or exposed in internet? They assuming their network is constantly compromised?

 

[Roid Rage]

Basically just upgrade to the later versions can patch the vulnerability already right ?

PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain the fixes. Older PHP branches are also affected. Although PHP 8.1 and earlier are outside normal upstream support, the PHP security team provided source backports for PHP 7.4, 8.0, and 8.1. - datadog

@Dr.Vijay patched already?

 

[kuti-kuti]

How we the end users can avoid this?

 

[KakiMeow]

PHP alrelli roll out patch riao

down server awhile put maintenance sign

patch patch

Okies riao most likely

 

[reno77]

heng i use next.js , this round I'm safe

 

[Thoreldan]

Heng i running html

 

[Sambuca78]

Hmmm... i wonder if our home router is safe...

 

[CCCustom]

heng i use next.js , this round I'm safe

Past few months multiple supply chain attacks hidden inside NPM packages, some more it was maintainers themselves who tio and then the updates posted by their account.

 

[dev_stg_prd]

think most IT gotta OT these few days.

Dunno VIjay patched hwz already bo since it runs on xenforo

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151/

merge more threads will have protection bopi bopi, no worries

 

[DragonFire]

Get used to this. There will be lots more. White hat va black hat frontier models

 

[IAmChiobu12M]

think most IT gotta OT these few days.

Dunno VIjay patched hwz already bo since it runs on xenforo

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151/

Chiobu no understand. Can breakdown for me? Means what I need to take note? I'm not IT trained...

 

[Lao_Tiko]

PHP alrelli roll out patch riao

down server awhile put maintenance sign

patch patch

Okies riao most likely

Also need to check if already compromised bah?

 

[KakiMeow]

Also need to check if already compromised bah?

check compromise surely take longer

than the patch one

meh meh patch first

same time parallel activity

 

[Lao_Tiko]

check compromise surely take longer

than the patch one

meh meh patch first

same time parallel activity

Yupz. Patched last night because I have self hosted lemp stack

 

[Rainstrike]

PHP ish moi favourite language leh I belong to PHP 5 era. Dunno got php 8 now siol