php2shell, Leaked Critical PHP Vulnerabilities

[MSP01]

https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

It'll be interesting month or two for sure.

Hope Processwire is compatible with the latest PHP.

[BrendonKoz]

There are, with any project, deprecation warnings and things to deal with - especially if users didn't update to the latest ProcessWire whilst updating to the shiniest major or minor new version of PHP.

PHP vMAJOR . MINOR . PATCH (v8.2.35)

Most should be upgrading to the most recent patch version that they currently have installed, and there should be no problem (assuming it's 8.2 or greater). If jumping from one major or minor version to another more recent one, there may be some work to be done, but not because of this security patch, only because of the version differences.

[adrian]

PW runs just fine with PHP 8.5. I honestly can't understand why everyone hasn't been running 8.5 since its release (or very shortly after). If you're on shared/managed hosting and they don't support new versions in a timely manner, find a new host, or take the time to learn how to manage things yourself - even if you have no experience, it's a no brainer now with AI agents to  guide you step by step (or even do it for you). I run 8.5 everywhere and had all my servers patched within minutes of the release this morning. 8.6 is due next month and if you skip versions it just gets harder and harder to update. And, again, AI agents can easily scan your code and find things that need updating and fix them in no time.

[sleepycron]

For anyone on shared hosting: the PHP version is often just a per-domain dropdown in the control panel, so you can switch a staging subdomain to 8.5 first and click through the site with debug on before touching the live one.