Latest activity

Remember when you could update just PHP, without having to wrestle with changes that other updates may make? Oh... those were the days.

Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...

or might be options for /etc/httpd/conf/extra/httpd-includes.conf until we know more.

So your ModSec works? Do you use the default owasp rules or something specific? My test was on a site that doesn't use Cloudflare, so...

Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...

I've seen the requests come in, one of them being a really long array in the query string. In my case ModSec blocked the requests. If...

Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...

Had some fun, together with Gemini, forcefully migrating old joomla and wordpress sites which where not governed by installatron on da...

I ran the test with all the checkboxes on and it failed on a PHP 8.4 website. The technical details say it got a 403 header but my...

https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell : Exploitation has been reported in the wild, and the previously...

https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell : Exploitation has been reported in the wild, and the previously...

https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell : Exploitation has been reported in the wild, and the previously...

Hello. My solution to this problem was to update the version in the archive provided by CloudLinux, and DirectAdmin now handles it...

as soon as PHP patches are available, DA team might apply them to PHP 5.x and 7.x whenever it is possible

For people interested, when using SSH as root and when I have to restart the services, I have multiple php-fpm versions like most here...