XFEDI

Conversation

ActivityPub

If you can’t update right away and your website is at risk, @cloudflare can temporarily help. Please note that this is a band-aid on a bleeding wound. #PHP #php2shell

Screenshot of a tweet on X from Dane Knecht (CTO at Cloudflare): PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 21, 2026 · 17:30 UTC

Replies

Natha@[email protected]

18h

↳ In reply to a post

Also, even tho I am not pro #OpenAI at all, the company has released a #codex skill that can help you in verifying if your website is at risk and needs to be updated ASAP. All you have to do is point your Codex at this GitHub repo: https://github.com/openai/php2shell-checker #PHP #php2shell

GitHubGitHub - openai/php2shell-checkerContribute to openai/php2shell-checker development by creating an account on GitHub.

↩ Reply ♡ 0 · ↻ 0 ↗ Original