levels.io：PHP 漏洞补丁发布后大量网站将被黑
People won't update PHP fast enough and so many sites will get hacked
levels.io 作者因 PHP 漏洞提前将自己的所有网站和 VPS 服务器断网，直到 PHP 完成补丁。他提醒一位在大厂、基础设施全跑 PHP 的朋友，对方因休假（OOO）回复"过几天再打补丁"，可见传统公司响应会更慢。补丁一发布，任何人都能反向推导出漏洞细节，因此预计会有大量网站被黑、用户数据泄露。
I notified a friend working at a big tech corporate about the PHP vulnerability as their entire infrastructure runs on PHP
He answered
"Thanks, I'll try patch it in a few days as I'm Out of Office (OOO) now"
And this is a modern tech company, imagine the traditional companies running PHP
People won't update fast enough and the vulnerability will be out in the wild once the patch hits as anyone can reverse engineer it based on the patch
Considering this, there's gonna be so many sites hacked and so much user data exposed I think
🤯
On levels.io
I pre-emptively disconnected all my sites and VPS servers from the web until PHP is patched
Originally posted on X · 💬 Reply to this on X
P.S. I'm on 𝕏 too if you'd like to follow more of my stories. And I wrote a book called MAKE about building startups without funding. See a list of my stories or contact me.
来源：levels.io · levels.io