Security blog

Security news for PHP servers, in plain language.

New vulnerabilities, PHP releases and simple guides for people who run WordPress, Drupal, Laravel and other PHP sites on their own servers.

Guides & articles

PHP4 min read

Which PHP versions still get security fixes?

A simple table of supported PHP versions, what "end of life" means for your sites, and how to plan upgrades.
Checklist5 min read

Security checklist for a new PHP server

Ten simple steps to make a fresh Ubuntu or Debian server safer before you put a website on it.