PHP2Shell & SakerWeb

It’s been a few days now since the news was awash with information about PHP2Shell, and how every PHP site in the world was vulnerable to it. That includes every WordPress site, and the SakerWeb console, but critically not any SakerWeb created sites.

You see, one of the key tenets of SakerWeb is that sites are hosted statically with no back-end code or database. This keeps the server immune to such vulnerabilities, and also able to cope with massive demand really easily because all it is doing is handing over files to web browsers - something it can do in its sleep.

Contrast that with a WordPress site, that may be one of thousands on a server, all jostling for CPU time while they do updates, and run backend code to extract information from databases so they can send pages to users.

Maybe the next discovery will be more destructive, and there will be another mass scramble to fix sites around the world (did you know that after 24 hours, only around 5% of sites were fixed, and many were taken offline as a precaution). Meanwhile those with their sites hosted here can sleep easily knowing there’s nothing to attack.