There’s a vulnerability in php that allows malicious actors to execute code on your server. Everyone is advised to take their php website down until the moment they have implemented php’s security patch. If they leave the vulnerable site up, consequences could be severe, all user data could be stolen.
The US National Security Agency told all organisations using PHP to take their systems offline if they were unable to patch them immediately.
It can take awhile to patch every system in the world that uses PHP at the same time, so until then it’s better to just turn the server off until you can.
Could someone please explain in what situation would any website need to go offline to update PHP?
There’s a vulnerability in php that allows malicious actors to execute code on your server. Everyone is advised to take their php website down until the moment they have implemented php’s security patch. If they leave the vulnerable site up, consequences could be severe, all user data could be stolen.
It can take awhile to patch every system in the world that uses PHP at the same time, so until then it’s better to just turn the server off until you can.