Security
PHP2Shell: the PHP bugs being exploited right now, and exactly how to check and patch
Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.