DevLMS

Blog2 posts

php

  1. Drawing of a blue line slipping under a locked server cabinet door and winding up inside.

    9 min read

    php2shell explained: what the two PHP bugs actually do

    How CVE-2026-109618 and CVE-2026-109619 work, why mod_php is the worst case, what exploitation looks like so far, and a checklist for your PHP servers.
  2. Drawing of a sleeping elephant on a stack of books shaped like a school, with a blue key forgotten on the floor.

    7 min read

    Outdated PHP under Moodle is a security hole, not a detail

    PHP 8.1 is out of support, PHP 8.2 follows on 31 December 2026, and the October 2026 php2shell fixes skipped both. What that means for your Moodle site.