Comment by LoganDark
1 day ago
I wouldn't skip updating, but is there anything else we can do, other than simply shutting down the web server until the fix is available?
1 day ago
I wouldn't skip updating, but is there anything else we can do, other than simply shutting down the web server until the fix is available?
I do not have details about any mitigation. There are rumors that people have independently come across php2shell exploits.
I shut down my servers five hours ago. This might have seemed premature at the time.
I think the best course of advice for most people is to shut down their servers as soon as they possibly can.
I applied the mitigation to all my servers when it was released, but now I've stopped all the httpds. A few hours of overnight downtime, vs potentially trying to restore everything from backups tomorrow. Everyone should weigh it up.
You could disconnect the web server from the internet!