Comment by Svip
16 hours ago
Or:
3. Disable PHP entirely on your server, and live with broken sites until the patch arrives.
That's what I did; I can live with my sites being down until it's possible to patch PHP. Though, there are likely others who cannot. The CERT-EU advisory is basically advising the same thing[1].
[1] https://cert.europa.eu/publications/security-advisories/2026...
I maintain one old site in PHP. This just got way easier to communicate with my users when I can communicate that major government services are also offline.
Our current plan is to refactor this into Rust using a coding agent. It looks feasible to get this done today.