This week, two critical vulnerabilities in PHP became public under the name PHP2Shell. They let attackers run code on a server without logging in. The flaws are in PHP itself, not in any particular application, so every site running PanPlay is affected too.
play.pangom.net was not affected and stayed online the whole time. Our servers run a current, supported PHP version and were patched right away.
If you host PanPlay yourself, please update PHP now. The fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Versions that are no longer supported won’t get a fix, so if you’re on one of those, it’s time to upgrade. On shared hosting, check your hosting control panel or ask your provider.
PanPlay itself doesn’t need any changes. Our advice stays the same: use current, supported versions. Stable and up to date are not opposites.
Leave a Reply