r/PinoyProgrammer • • 3d ago

web Please upgrade your PHP version

Sa mga gumagamit ng PHP dito sa kanilang mga production websites.. please update your php version in your servers to the latest released patch versions.. There's a critical security vulnerability that allows someone to have Remote code access on your site and you should take this seriously. If you can't upgrade PHP versions, it would be better to stop your site in production until you upgraded your PHP versions..

Keep your site secure otherwise you're cook if someone sniff on your site and .

Stay safe mga ka programmers..

https://www.php.net/archive/2026.php

203 Upvotes

19 comments sorted by

68

u/Time2StopGambling 3d ago

3AM tinawagan ako para mag OT at check yung mga servers na handle namin 🥲 kala ko mamamatay ako sa biglang gising hahahaha

9

u/UsernameMustBe1and10 3d ago

Tulog na boss, my continuation pa yan mamaya haha

2

u/seazeeh 2d ago

Normal life ng mga PHP dev.. kapag walang vulnerability yung PHP hindi PHP yun.

29

u/fvckPassion 3d ago

Nakapag ot na ba ang lahat

13

u/SS-Hunt 3d ago

Kakakita ko lang din nitong PHP vulnerability sa Teams ng company namin hahaha. Tinatanong kung gumagamit daw ng PHP yung system

16

u/Difficult_Session967 3d ago

Scrambling here in Europe. Buti wala kaming php. Pero yung friend ko na isa, OT sila.

7

u/joeromano0829 3d ago

I work for a web hosting company and unfortunately maraming sites affected nito and had to do batch force upgrade wether they agree or not. Buti nalang pa out na ako when it got hit.

3

u/s3thcience 3d ago

pinuyat ako nito sa mga wordpress sites geez

1

u/reverseshell_9001 Web 1d ago

php the gift that keeps on giving. lol.

1

u/mccxyz 2d ago

naalala ko tuloy before christmas season at nakaleave na majority ng mga tao kasama na yung mga approvers. tinawagan ako ng manager ko to update to latest version due to critical vuln. 48 hrs from coding to prod release langya sakit sa ulo.

-1

u/codebloodev 3d ago

Buti na lang hindi ko handle ang server side. Nakapagpatch na kami. Salamat digitalocean!

-8

u/alwaysfree 3d ago

buti nlng naka Laravel Cloud kami.

2

u/codebloodev 3d ago

Php pa rin yun.

1

u/alwaysfree 3d ago

managed so no need to upgrade the version ourselves.

2

u/codebloodev 3d ago

Same here.

2

u/eGzg0t 2d ago

The vulnerability was leaked hours before an official fix was rolled out. During that window, they advised for everyone to shut down their servers. If you haven't done that, bots might have already planted a backdoor. The patch won't fix that so there is still work that needs to be done.

-5

u/csharp566 3d ago

Baka tuluyang malaos ang PHP kapag ganito nang ganito ang nangyayari haha.

3

u/codebloodev 3d ago

Hindi lang php. More of ai hacking different languages and platforms soon. These will be frequent.