Post

I guess it's weird that web servers didn't before now think they needed just a big red button for "disable all PHP"

21/10/26, 1:57 am3 reposts58 likes

@jernej--s.infosec.exchange.ap.brid.gy

@dryad.technology It's easier when you use php-fpm (instead of Apache module) – just stop php-fpm service and you're done.

mcc

@dryad.technology

Anyway I don't know who needs to know this but 1. You can easily shut down an entire apache server/<Directory>/<VirtualHost>/ by placing into your conf or htaccess Redirect 503 / 2. It might be a good idea to do this on any sites with PHP for about 36 hours until this week's patch is released

fizz ☭

@fizz.allura.moe

would chaotic good here be using the RCE en masse to kill the HTTP proxies of vulnerable servers

Nicolás Alvarez

@nicolas17.xyz

considering if I should shut down identity .kde .org

mcc

@dryad.technology

I mean, maybe, what would be the consequences if that got popped

mcc

@dryad.technology

Ps check ur dms