The security patches addressing the recently disclosed PHP vulnerabilities have been applied to the servers used for IntoClicks-managed hosting. For clients hosted with us, patching for this issue is complete, and you do not need to install these updates yourself.
What happened
On October 21, 2026, the PHP development team released security updates to fix two critical vulnerabilities in PHP. PHP is software that runs on web servers and helps power many business websites.
Under certain conditions, the vulnerabilities could allow an attacker to run unauthorized code on an affected server without logging in. This is called remote code execution, which is why the advisory received urgent attention.
The fixes needed to be applied to the PHP software on the hosting server.
How the issue was addressed
Temporary configuration changes were applied to reduce exposure while the security patches were being deployed.
As of October 22, 2026, the patch rollout for our managed hosting environment is complete. The security patches addressing these vulnerabilities are now in place, completing the update process described in our earlier client communications.
What the announcement means
A vulnerability announcement does not, by itself, mean that a website was hacked. It identifies a weakness in software that needs to be corrected. The PHP updates address the reported weaknesses.
Regular updates to website software and hosting systems remain part of ongoing website care.
What clients need to do
For websites hosted on our managed servers, there is no action required from you to apply these PHP patches. The update was handled at the hosting level.
If you have questions about this update or are unsure where your website is hosted, contact the IntoClicks team. We can help clarify what applies to your site.