Imagine logging into a website only to find that hackers have taken control of its servers. They could steal data, tamper with websites or shut online services down completely. This was the risk facing millions of websites after two serious security flaws were discovered in PHP, a programming language used by roughly 70 per cent of websites worldwide.
As the threat escalated, Ondrej Sury, a volunteer software engineer in Czechia, stepped in to help website operators get the security fixes they needed, the Atlantic reported. He quickly turned the fixes into ready-to-install software packages, helping administrators protect their systems without having to work out how to install the code themselves.
The situation was already becoming urgent. The PHP Foundation, which maintains the programming language, had learnt about the flaws, but information about the fix leaked online before its scheduled release. The patch was brought forward by a day as developers raced to make it available.
Meanwhile, hackers were attempting to exploit the vulnerabilities. Cloudflare CEO Matthew Prince said his company recorded thousands of attempts in the 10 hours before the public announcement. Within 45 minutes, the number had risen to tens of thousands, reaching hundreds of thousands within two hours and eventually millions.
How Did Ondrej Sury Help Stop The Threat?
The PHP Foundation provided the code needed to fix the vulnerabilities, but website administrators still needed a practical way to install it. Sury packaged the fix into software that could be installed directly, saving website operators time when every hour mattered.
He also prepared fixes for older PHP versions dating back around 10 years. This was important because some businesses, schools and other organisations still use older systems and cannot immediately switch to newer software.
Speaking to The Atlantic, Sury explained how his experience helped him handle the emergency.
“I've been doing this for a long time, over 20 years. A lot of the stuff that I do is automated,” he said.
He added that the PHP Foundation had given him time to prepare the packages. “I feel a responsibility toward the users of the internet,” he said.
Sury explained that the foundation supplied the source code, which he turned into packages ready for installation. Without this work, website administrators could have spent hours figuring out how to apply the fix, leaving vulnerable servers exposed for longer.
His contribution did not automatically secure every website. Administrators still had to install the updates, but the ready-to-use packages helped them respond more quickly.
Who Is Ondrej Sury?
Sury is a Czech software engineer who has spent more than 20 years maintaining PHP software packages in his spare time. He also works as director of domain-name-system engineering at the Internet Systems Consortium, a non-profit organisation involved in maintaining essential internet infrastructure.
Sury is part of the open-source software community, whose members maintain code that people and organisations can use and improve. Although this software supports services around the world, its maintenance often depends on a relatively small number of developers.
His work during the PHP crisis extended beyond preparing fixes for current versions. He also backported the security updates to older versions of PHP, helping organisations that might otherwise have struggled to protect systems running outdated software.
Despite the praise he received online, Sury played down his role, describing it as a responsibility he had fulfilled. He said donations received over 24 hours following the incident were equivalent to roughly a year's worth of donations he had previously collected.
He also highlighted a problem that goes beyond this particular crisis: companies rely heavily on open-source software, but the people maintaining it do not always receive enough financial support.
What Is PHPocalypse?
PHPocalypse describes the potential internet-wide crisis caused by the two serious PHP vulnerabilities, known as PHP2Shell.
PHP is a programming language, or coding, that functions behind the scenes of websites. It allows websites to process logins, load pages, and manage data input by users. WordPress and Drupal use PHP, so a flaw in the programming language threatens websites all over the world.
The problems could enable hackers to deliver tailored requests to the compromised servers and have them execute malicious code. In other words, they could potentially hijack vulnerable computers and steal or disrupt websites.
The flaws were particularly concerning because PHP is so widely used. If attackers had exploited vulnerable servers on a large scale, the consequences could have extended to businesses, schools, hospitals and government websites.
Cybersecurity researchers used an advanced OpenAI model to help identify the vulnerabilities. The discovery highlighted how artificial intelligence can help find security weaknesses, but the subsequent rush to patch them also showed how quickly a vulnerability can become a major threat once information about it leaks.
What Does The PHP Crisis Reveal About Internet Security?
The PHP incident showed how much of the internet depends on software maintained by developers who often work behind the scenes and receive little recognition.
Sury said artificial intelligence is accelerating both cyberattacks and defence. While AI can help researchers discover vulnerabilities, attackers can also use increasingly advanced tools to exploit weaknesses.
He has argued that companies benefiting from open-source software should contribute more towards maintaining it. Without adequate funding, essential infrastructure can remain dependent on a small number of people.
You May Also Like To Watch:
https://youtu.be/jJB1CXOqGJ0?si=FKJR1D3AKWL4l0QB