PHP2Shell: Check, Patch and Restart Your PHP Servers
Two critical PHP bugs fixed on 21 October 2026 can let one request run code on your server. How to find the PHP that serves your site, check the version, restart it and block the known paths.
Category
How the web works in practice: HTTP, caching, redirects, servers and static sites.
Two critical PHP bugs fixed on 21 October 2026 can let one request run code on your server. How to find the PHP that serves your site, check the version, restart it and block the known paths.
Export with WP-CLI, rebuild with a small Node script, keep every old URL working: what I learned relaunching this site as static HTML after dropping 1,600 posts.
A persistent WordPress object cache for hosting without Redis: each entry is a PHP file that OPcache keeps compiled. How it works, and what it did on a test site.
What the backend really receives behind nginx: proxy_pass URI rewriting, Host and X-Forwarded headers, WebSocket upgrades, 504s from timeouts, and streaming.
Not first match, not longest match, but a mix of both. A test config where every location names itself shows exactly how nginx picks one, and where it surprises.
try_files checks files in order and only the last argument redirects. Static clean URLs, a PHP front controller with php-fpm, and the upload exploit it prevents.
no-cache does not mean do not cache. A hands-on look at Cache-Control, ETags and 304 responses with a tiny Node server, plus how a CDN treats them.