Security
10 articles, newest first.
PHP2Shell ModSecurity Fix Blocking WordPress and Joomla Saves on cPanel
The cPanel ModSecurity fix for PHP2Shell turns on body inspection server-wide, so old rules block WordPress, Elementor and Joomla saves. How to check and fix.
PHP Is Not Out of the Woods Yet After PHP2Shell
A researcher claims six more unpatched PHP flaws after PHP2Shell. Unconfirmed, and nothing to do today, but PHP is not out of the woods. What to prepare now.
The PHP Project Advises Turning Off Session Upload Progress Until the Next Release
PHP has posted an informational advisory on session upload progress and CVE-2026-115560. Who needs to act, the one-line fix, and how to find sites with it on.
How mySites.guru Helps Agencies Firefight PHP2Shell at Scale
How agencies with client sites spread across many hosts and servers see which still run vulnerable PHP, chase the right host, and handle back-ported builds.
PHP's Critical Security Release and Your Joomla or WordPress Site
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two unauthenticated RCE flaws. Your host applies the update to your Joomla or WordPress site; 8.1 and older get none.
A Web File Manager for Your Joomla and WordPress Sites
mySites.guru now includes a secure, opt-in web file manager for Joomla and WordPress: browse, edit, upload and delete files with no SFTP client needed.
What Site Audits Reveal About Joomla and WordPress Security
99% of Joomla sites don't force MFA and 91.8% of WordPress sites skip DISALLOW_FILE_MODS. Real audit data on which security features get used.
Delete 9,000 Hacker .htaccess Files in One Click
Hackers drop malicious .htaccess files in every folder of your site. mySites.guru deletes the stray ones in one click and leaves the rest untouched.
Let's Encrypt Is Down. Renewals Are Next
Let's Encrypt halted certificate issuance at 18:37 UTC on 2026-05-08 after a cross-signed cert problem with its new Generation Y root. Resumed in 2h 28m.
mySites.guru supports login with Passkeys
mySites.guru supports login with passkeys - Face ID, Touch ID, Windows Hello, or any FIDO2 device. Faster than passwords, impossible to phish.