Remi PHP Extended Support: Security Updates for CentOS 7
Remi stopped building PHP for CentOS 7 in June 2024. Here is how to keep your existing Remi PHP receiving security updates in place,…
php
Practical php guides from the GetPageSpeed engineering team: configuration, performance tuning and security for production Linux servers.
23 articles
PHP2Shell on AlmaLinux, Rocky Linux and RHEL 8/9/10: Check and Patch
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in every AlmaLinux 8, 9 and 10 PHP stream. How to check your build, the fixed version per stream,…
PHP2Shell on CentOS 6: Patched PHP 5.3, 7.0 and 7.1
PHP2Shell (CVE-2026-109618, CVE-2026-109619) has no distribution or upstream fix on CentOS 6. Here is the in-place fix for the stock PHP 5.3 and Remi…
PHP 8.2 End of Life (December 31, 2026): What Are Your Options?
PHP 8.2 reaches end of life on December 31, 2026: no more upstream security releases. Upgrade paths for current distros, and patched 8.2 packages…
PHP2Shell Mitigation in NGINX: What It Can and Can’t Block
Can NGINX mitigate PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Partly. Tested configs for blocking multipart and filtering uploads with ModSecurity, and why only patched PHP fixes it.
PHP2Shell on Amazon Linux 2: Patched PHP 7.2 and 7.4 (x86_64 + ARM64)
PHP2Shell (CVE-2026-109618, CVE-2026-109619) has no AWS fix for PHP 7.2 or 7.4 on Amazon Linux 2. Upgrade Amazon's php7.2 or Remi's php74 in place…
How to Install PHP 8.5 on CentOS 7
Install PHP 8.5 on CentOS 7 using base packages or a parallel collection, with PHP-FPM, built-in OPcache and clear extension compatibility guidance.
PHP2Shell on Ubuntu and Debian: Patched PHP 7.2-8.4 Without Ubuntu Pro or ELTS
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Fixes for Ubuntu 20.04/18.04 and Debian 10 are Ubuntu Pro or ELTS only, and sury…
PHP2Shell on CentOS 7: Patched PHP 5.4 to 8.4
PHP2Shell (CVE-2026-109618, CVE-2026-109619) is a critical unauthenticated PHP RCE. Here is the free fix for every PHP from the stock 5.4 to 8.4 on…
NGINX Secure Link: Signed URLs and Hotlink Protection
Learn how to implement NGINX secure link functionality for signed URLs and hotlink protection. This comprehensive guide covers the HMAC Secure Link module installation,…