🔶 What is a PHP security breach and what are its risks?

🔶 What is a PHP security breach and what are its risks?

A serious PHP security warning on Tuesday, October 20, left many government websites unavailable around the world, including France, the Netherlands and Belgium. The website of the Paris police and the Dutch parliament announced that they had taken down the site after receiving this security warning.

The PHP programming language is the basis of many websites; From simple blogs to large news portals and online shopping stores and content management systems, PHP serves as a base system.

Information technology experts estimate that "WordPress" software alone, which is PHP-based software, is used to manage about 400 to 500 million websites worldwide. WordPress is not the only software based on PHP, other content management systems such as Moodle, Joomla and Typo3 are also based on PHP. First, on Tuesday, October 20, the PHP security team announced that it would release security updates on Wednesday, October 21 at 14:00 UTC, and asked system administrators to be ready to install these updates immediately after the release.

In Germany, the Federal Information Technology Security Office BSI has issued an official cyber security warning and declared a Category 3 or Orange alert for it. This warning means that countermeasures must be taken immediately, as there is a risk of widespread disruption to the normal course of operations. The German Federal Office for Information Technology Security in its announcement clearly emphasized that these vulnerabilities have a very high and unusual threat capability.