Journal

Blog

Longer notes on architecture, reliability, delivery, and the craft around shipping—not a firehose, intentionally paced.

← Homepage RSS feed

Author: Fatih Şennik

Hosting PHP Security WordPress

A Serious PHP Security Hole Just Opened — Here's What You Actually Need to Do

On 21 October 2026, the people who make PHP released an emergency fix for two serious security problems. In plain terms: an attacker could run their own code on your server without needing a password, a login, or any access at all. That's about as bad as it gets. The problems are officially called CVE-2026-109618 and CVE-2026-109619 — you don't need to remember those. Here's what matters:

Read article: A Serious PHP Security Hole Just Opened — Here's What You Actually Need to Do

Author: Fatih Şennik

Hosting MySQL Security WordPress

The MySQL Trigger Hack: How Attackers Plant Backdoors in Your Database, Not Your Files

I've cleaned up a lot of hacked sites over the years. Malicious PHP files hidden in upload folders, fake plugins, obfuscated eval() chains and the usual stuff. You learn where to look. You get fast at it.Then I ran into one that broke all my assumptions.A clie

Read article: The MySQL Trigger Hack: How Attackers Plant Backdoors in Your Database, Not Your Files