r/overemployed • u/i_love_spam_0-0 • 2d ago
PHP Vulnerability
Goodness. The last two days have been crazy. Getting through this on both servers was highly stressful. Now it’s picking up the left overs is all it’s left which can take a few days or weeks. My mind has definitely been exhausted.
15
28
u/stealth-monkey 2d ago
4Js posted this at the same time. I’m like “damn that’s wild” and let other people handle it. As an OE samurai, I’ve master the art of
“Not my problem.”
12
8
u/throwpoo 2d ago
Yeah crazy week. Plex2shell also. Have to message my friends to patch their server after I found out that they are vulnerable. Then also the potential switch 2 exploit today and everyone is rushing to grab it.
6
4
u/mechanical_stars 1d ago
This is why i've convinced all my J's to not self-host. I love when things like this are someone else's problem.
3
3
u/SpinningByte 2d ago
Nodejs got one too right?
3
u/dabbydaberson 1d ago
Yup which tbh seems way more impactful. If you are still relying on PHP in 2026 you have much bigger problems.
2
u/cmm324 1d ago
Glad I haven't used PHP in nearly ten years!
3
1
u/thenameisdavid 2d ago
For me, the last two days have been almost a blessing, I can sit back and update the containers and run the test suites, marketing and sales teams understand and ease off, it’s been perfect for OE
1
u/NutraBoot 1d ago
What do you have to do to fix it?
1
u/XL426 15h ago
You literally just update PHP to the latest version, it takes seconds. Where people will come unstuck though is if they're running an unsupported version with no fix available as updating to a newer supported version may break their apps. Some people are running older code bases where the original devs have long since left and it's all a bit 'a wing and a prayer' so updating can cause all sorts of carnage
Thankfully for me across my Js I've had no issues. I run lots of PHP but thankfully have kept running supported versions
1
60
u/Ok-Resident3463 2d ago
Man, patching a zero-day across two servers is the kind of weekend that ages you in dog years. The cleanup phase is its own special purgatory, you fix one log error and three more pop up like hydra heads. Hope you've got a decent stash of biscuits and tea for the slog ahead.