A Production Hardening Checklist for PHP Servers
Ten practical settings and habits that limit the damage when the next PHP or application vulnerability arrives, from FPM pools to OPcache.
Read articleSecurity articles
Vulnerabilities, incident lessons and hardening guides for web servers and applications.
After StyleSmuggler: What Every Magento Store Should Monitor Daily
Patching closes the hole but does not tell you if someone got in. The six security signals to watch every day, and how to automate them.
Read article
PHP2Shell: What the Critical PHP Vulnerabilities Mean and How to Respond
Two critical flaws in PHP itself allow remote code execution. Which versions are affected, the fixed releases and what to do, in order.
Read article
StyleSmuggler: What the Magento Zero-Day Taught Store Owners
CVE-2026-75650 gave attackers code execution on Magento stores before a fix existed. How to check a store and what to change before the next one.
Read article
OpenCart in 2026: Which Version to Run and the Security Questions to Ask
OpenCart 4.1.0.4 and 3.0.5.1 bring PHP 8.5 support. Which line to choose, the known vulnerabilities and how to protect your store.
Read article