字号·· | 护眼
TheVerge

PHP:这三个小字母正在网络上肆虐PHP: The three little letters wreaking havoc across the web

点「原文对照」整页切到原文,或双击某段只看那段的原文。

这个PHP问题听起来是个相当大的麻烦。插图:卡洛·卡德纳斯 / The VergeThis PHP issue sounds like a pretty huge problem. Illustration by Carlo Cadenas / The Verge

编程语言PHP中被发现的两个漏洞使互联网的大片区域陷入危险。据一些统计,多达70%的网站以某种方式使用PHP。它为维基百科、WordPress、Drupal以及许多其他热门网站和平台提供支持,包括DeviantArt和4Chan——这些网站在漏洞披露后被暂时关闭。就连政府机构也未能幸免。

Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, which were temporarily shut down after the vulnerabilities were disclosed. Even governments weren’t immune.

但这并不只是更新几台服务器那么简单。该漏洞存在于大约20年来发布的每一个PHP版本中,其中许多版本已不再受支持。这意味着一些不再积极维护的老旧网站和服务面临风险,它们除了永久关闭之外几乎没有别的选择。

But it’s not as simple as updating a few servers. The vulnerability exists in every version of PHP dating back roughly 20 years, many of which are no longer supported. That means some older sites and services that are no longer actively maintained are at risk, leaving them with little option but to permanently shut down.

摄影:阿梅莉亚·霍洛瓦蒂·克拉莱斯 / The VergePhoto by Amelia Holowaty Krales / The Verge

以下是安全公司Wiz所称“软件史上发现的最严重漏洞之一”的最新进展。互联网档案馆因PHP而短暂被迫下线。两款老派日本手机游戏因PHP漏洞利用而停服。

Here’s all the latest developments in what security firm Wiz has called “among the most severe vulnerabilities discovered … in software history.”The Internet Archive was briefly forced offline because of PHP. Two old-school Japanese mobile games are shutting down over the PHP exploit.

PHP2Shell漏洞利用对Cloudflare造成了沉重打击。

The PHP2Shell exploit hit Cloudflare hard.

PHP:今天让互联网各地网站下线的三个字母。GPT‑5.6 Sol被用于识别关键的PHP缺陷。一个关键的PHP漏洞可能今天就会让网站下线。

PHP: The three letters that shut down sites all over the internet today GPT‑5.6 Sol was used to identify critical PHP flaw. A critical PHP vulnerability may take websites down today

阅读媒体原文 ↗