§hey 👋 quick one this week.
a serious security hole called PHP2Shell turned up in PHP, the software running underneath almost every WordPress site. we're building Dagny, so this one landed right in our lap.. here's the short version 👇
1/ updating WordPress won't fix it
> the hole is in PHP, one floor below WordPress and your plugins
> only your web host can apply the fix
2/ check your site today
> in WordPress: Tools → Site Health → Info → Server
> 8.5.12, 8.4.27, 8.3.36 or 8.2.35 means you're patched. anything else, email your host
3/ it's not one bad week
> October alone: a hacked add-on, a tampered download, stolen backup keys, then this
> running a WordPress site has quietly become a part-time job
4/ or switch to a WordPress alternative that looks after itself
> type your web address into Dagny and see your new site in minutes
> no PHP, no plugins, and you change it by text
quick update: if your site runs on WordPress (or anything else built on PHP) and you move it to Dagny, you get 2 months of free hosting and 50% off your Dagny credits. just mention this newsletter when you sign up.
the full story, with the timeline, a checklist and quick answers, is on Medium 👇
still on WordPress? hit reply and tell me what you're doing about it, i read everything.
p.s. i'm on X as @Avra_b.. follow along there and say hi 🙌
- Avra · bydagny.com