mod_php vs. PHP-FPM: Securing UK Servers Post-PHP2Shell
PHP identified mod_php as the worst-case scenario in PHP2Shell. Discover architectural changes and how to migrate to FPM without downtime.
Cleverson Gouvêa#
php2shell
7 posts
Cleverson Gouvêa
PHP2Shell Vulnerability: Essential Mitigation for UK Servers and Why It's Not Enough
The official three adjustments buy time, not security. Discover where to apply them, how to restart each PHP worker, and what to do until the full patch arrives.
Cleverson Gouvêa
PHP Docker Vulnerability: Rebuild Your Images Post-PHP2Shell
docker pull doesn't correct PHP2Shell. See how to rebuild php:8.x and FrankenPHP images and what to change in CI/CD for the patch to reach production.
Cleverson Gouvêa
Server Patch Management: Your 24/7 Post-PHP2Shell Strategy
From the 17/10 attack to the 21/10 patch: understanding the PHP2Shell exposure window and the part that's entirely within your control.
Cleverson Gouvêa
PHP2Shell (CVE-2026-109618): A UK Executive Briefing
PHP2Shell demystified: who's exposed, what's been patched, what mitigations don't fix, and 7 critical questions for your team.
Cleverson Gouvêa
Moodle PHP Upgrade: 8.3.36 or 8.4.27 – UK Plugin Compatibility Guide
Moodle 4.5 does not run on PHP 8.4. Discover which patched version to use in your VLE, how to validate the upgrade, and how to roll back if issues arise.
Cleverson Gouvêa