Glossary
The hard words in our articles, in one line
Hover over or tap any word with a dotted underline and its explanation opens right there. Here you can browse every term in one place.
155 terms
A
- Vulnerabilities & incidentsActive support and security supportアクティブサポート・セキュリティサポートEach PHP version gets fixes for both bugs and security problems for its first two years (active support), then only for important security problems for two more years (security support). When security support also ends, the version reaches end of life.
- Websites & CMSAdmin account管理者アカウントA user with permission to change everything on the site. If an administrator you have never seen appears, you should suspect an intrusion.
- Websites & CMSAdmin dashboard管理画面The administrator screen used to configure a website or server. During the PHP2Shell emergency maintenance, some hosting companies' admin screens were briefly unavailable.
- OrganizationsAhnLabアンラボ(AhnLab)A South Korean security company. It warned that even "defense tools" posted on GitHub should have their code read first and be run only in an isolated environment.
- OrganizationsAlibaba CloudアリババクラウドA Chinese cloud company. It says that after you change the PHP version on its web hosting, the change takes effect in about five minutes.
- Vulnerabilities & incidentsAmbiguity aversion曖昧さ回避People's tendency to choose a risk whose size they know over one whose size they don't. Not knowing price and scope makes people put off asking, so PHPFree shows price and scope up front.
- Websites & CMSAPI keyAPIキーA secret, key-like string used to connect with other services. PHP2Shell can leak it from memory, so replacing it is recommended.
- Vulnerabilities & incidentsAutomated scanning脆弱性探索An attack in which a program sweeps through internet addresses one by one looking for open gaps. It looks at addresses and gaps, not at a company's name or size.
B
- Vulnerabilities & incidentsBackdoorバックドアA hidden passage an attacker sets up after getting in once, so they can easily get back in later.
- Vulnerabilities & incidentsBackportバックポートCarrying a fix from a newer version over to an older one. For PHP2Shell, only minimal fixes were released for the end-of-life versions 7.4, 8.0 and 8.1.
- Websites & CMSBackupバックアップCopying your files and database so you can go back if something goes wrong. Always take one before upgrading PHP.
- Websites & CMSBackward-incompatible changes後方互換性のない変更Things that behave differently in a new version than they did before. PHP's official documentation lists them for each version, and they are why old plugins stop working on new versions.
- OrganizationsBitsightA U.S. security company that scans the whole internet to analyze security risks. It said that, among PHP installations whose version could be identified, only about one third were on release lines covered by the PHP2Shell fix.
- Servers & hostingBuild (from source)ビルドMaking a program yourself from its source code. For the end-of-life PHP 7.4, 8.0 and 8.1, you may have to build the PHP2Shell fix yourself.
C
- OrganizationsCafe24A South Korean web hosting company. It announced that, from the night of October 21, it would update its PHP 8.2-and-later services one by one to the latest release in the same line.
- Servers & hostingChange of registrant (domain or server account)名義変更Changing the owner of a domain or a server account. You need documents or consent from the original owner named on the registration, and after the change a domain cannot be moved to another registrar for 60 days.
- Servers & hostingChangelog変更履歴(チェンジログ)A record of what fixes went into a program. If a CVE number is listed there, that vulnerability has been fixed.
- OrganizationsCISA (U.S.)CISAThe U.S. government's cybersecurity agency. It advised patching immediately and, if that is not possible, taking the site offline.
- OrganizationsCloudflareA company whose services stop attacks before they reach a website. During PHP2Shell, it said it had added protective rules for all customers and observed the attack traffic.
- Servers & hostingCloudflare PagesCloudflare's static site hosting. Requests for static files are free and unlimited, and its guidance is shifting toward starting new projects on Workers.
- OrganizationsConoHa WINGA Japanese rental server service. It applied the fix without changing the version number, and warned that the old number may still show after the fix.
- Servers & hostingContainerコンテナA way of running a program and its environment packed together like a single box. To fix PHP, you have to rebuild the box with the new PHP and deploy it again.
- Websites & CMSCritical error (white screen)重大なエラーThe blank white screen or notice WordPress shows when it stops because of a program error. In most cases no data has been lost; the page simply could not be drawn.
- Websites & CMSCustom codeカスタマイズCode for features and themes that a web agency changed or built just for that site. It may need separate fixes for a new PHP version, and Korea's Cafe24 says it does not offer technical support for code changes.
- Vulnerabilities & incidentsCVE (Common Vulnerabilities and Exposures)CVEA worldwide shared number given to each publicly disclosed vulnerability. It lets different countries and companies refer to the same vulnerability by the same number.
- Vulnerabilities & incidentsCVE-2026-115560A session-handling vulnerability announced by the PHP Group on October 23, separate from PHP2Shell. It only matters in rare setups, and PHP itself describes it as unlikely to occur.
- Vulnerabilities & incidentsCVSS (severity score)CVSS(深刻度スコア)A common worldwide score that rates how serious a vulnerability is, out of 10. PHP2Shell scores 9.2 under CVSS v4.0, rated "Critical."
- OrganizationsCybelAngelA security company that surveys servers exposed on the internet. It published statistics showing that many environments still run end-of-life PHP.
D
- Websites & CMSDebug log (debug.log)デバッグログA file where WordPress writes down error details. Anyone can open it by its web address, so once you find the cause, turn the setting back and delete the file.
- Vulnerabilities & incidentsDedicated security team情報セキュリティ専任組織A team inside a company whose job is information security. In Korea's 2025 Information Security Survey, 35.3% of companies doing security work had one.
- Settingsdisplay_errorsThe setting that decides whether error messages are shown to visitors. Turning it off (Off) does not stop the PHP2Shell attack.
- Servers & hostingDNS (Domain Name System)DNSThe settings that connect your domain to your website's server and your email service. Whoever can change your DNS can reroute both your website and your email.
- Servers & hostingDomain auth code (EPP code)認証コード(AuthCode)The secret code you need to move a domain to another registrar. For Korea's .kr, you look it up on KISA's WHOIS after the registrant verifies by phone or email; for generic domains such as .com, the registrar provides it within five days of the request.
- Servers & hostingDomain expiration and redemption grace periodドメイン名の廃止・有効期限切れA domain you do not renew is suspended and then deleted. Generic domains such as .com can be recovered for 30 days after deletion, and a dropped domain can be registered again by someone else.
- Servers & hostingDomain registrantドメイン登録者The person or company that legally owns a domain. Renewal notices go to the registrant's email, so check that it is in your company's name and is an address you can actually be reached at.
- OrganizationsDreamHostA U.S. hosting company. It advises creating a test site and checking there first before raising WordPress's PHP version.
E
- SettingsEmail authentication (SPF, DKIM, DMARC)送信ドメイン認証Settings that prove to recipients that email sent in your company's name is genuine. In a 2018 U.S. FTC study, no hosting service had DMARC turned on by default.
- SettingsEmail spoofingなりすましFaking the sender address of an email so it looks real. Even an official-looking address is no guarantee, so check the content and links too.
- Servers & hostingEmergency maintenance緊急メンテナンスWork that briefly stops a service to fix it urgently. During PHP2Shell, Japan's rental server companies carried it out one after another on October 21–22, 2026.
- Vulnerabilities & incidentsEnd of life (EOL)サポート終了When the developers stop fixing a version. If a hole is found after that, as a rule no patched release comes out.
- Vulnerabilities & incidentsEvidence preservation証拠保全When an intrusion is suspected, keeping access records and files exactly as they are before deleting anything or restarting. Korea's KISA and JPCERT/CC both recommend doing this first.
F
- Websites & CMSFormspreeAn outside service that adds a contact form to a static site. The free plan allows 50 submissions a month, and paid plans start at $15 a month with monthly billing.
- OrganizationsFTC (U.S. Federal Trade Commission)米連邦取引委員会The U.S. agency for consumer protection and fair competition. It advises small businesses to look at security features when choosing a hosting service.
- Servers & hostingFTP (File Transfer Protocol)FTPA channel for uploading and downloading files between your computer and the server. When you cannot get into the admin dashboard, you use it to rename a plugin folder.
G
- OrganizationsGabiaA South Korean web hosting company. It warns that changing the server environment resets your existing data and that it cannot be restored.
- Vulnerabilities & incidentsGeneral Availability (GA)正式リリースThe release that follows the test versions (RC) and makes software available to everyone. PHP 8.6 is planned for November 19, 2026, but the date may change.
- OrganizationsGeniansA South Korean security company. It explained the update commands for each operating system and how to restart PHP-FPM and Apache.
- Servers & hostingGitHub PagesGitHub's free static site hosting. Using it as free hosting for an online business is not allowed.
- Websites & CMSGoogle Search Console (Security issues report)Google Search ConsoleA free Google tool where you register your site and see how it is doing in search. If a hacking warning appears, check the cause in the "Security issues" report and request a review.
H
- Websites & CMSHeadless WordPressヘッドレスWordPressAn approach where WordPress is kept only as a storeroom for writing, and a different tool pulls in the posts to build the public site. WordPress (PHP) keeps running.
- Vulnerabilities & incidentsHelp-seeking avoidance援助要請の回避The tendency to put off asking for help because it feels like admitting "I'm not good enough." Seeing outsourcing as a decision based on conditions, not ability, eases that burden.
- Vulnerabilities & incidentsHoneypotハニーポットA decoy server deliberately left open to observe attacks. For PHP2Shell, attack attempts were recorded starting four days before it was made public.
- Servers & hostingHosting providerレンタルサーバー会社A company that rents out servers and looks after them for you. In Japan, examples include Xserver, Sakura Internet, Lolipop! and ConoHa WING.Pages that use this term 2
- OrganizationsHostingerA web hosting company. It finished rolling out the PHP2Shell fix across its platform by October 22 at 06:44 UTC and said customers on every plan except VPS needed to do nothing.
- Websites & CMSHTTP status code (500 / 200)HTTPステータスコードThe number a server attaches to its reply to a request. 500 means a server error and 200 means OK, but a successful PHP2Shell attack can still return 200.
- Websites & CMSHugoA static site tool that turns articles into HTML files in advance. It is used to move WordPress posts over and remove PHP from the live server.
I
- OrganizationsICANNThe organization that sets the international rules for generic domains such as .com. Its rules include two renewal reminders before expiration and a 30-day recovery period after deletion.
- Vulnerabilities & incidentsIndicator of compromise (IoC)侵害痕跡A sign that you may have been attacked or broken into. PHP2Shell has no definitive marker yet, so you have to infer it from unusual activity.
- OrganizationsInformation Security Survey (Korea)情報保護実態調査(韓国)Statistics that Korea's Ministry of Science and ICT publishes every year on how companies and individuals protect information. The 2025 survey, released in March 2026, covered 5,500 businesses with 10 or more employees.
- Settingsini_set() / .user.iniWays to change PHP settings from inside a website. They are not enough for session.upload_progress.enabled; you have to edit the configuration file instead.
- OrganizationsInternet Address Dispute Resolution Committee (KIDRC, Korea)インターネットアドレス紛争調停委員会(韓国)A Korean committee run by the Korea Internet & Security Agency that mediates disputes over domestic and international domains such as .kr and .com. It says cases are settled within 30–60 days from application to decision.
- OrganizationsIPA (Information-technology Promotion Agency, Japan)情報処理推進機構A Japanese government-affiliated information security agency. Before the patched releases came out, it asked organizations to get ready in advance.
J
- OrganizationsJPCERT/CCJPCERT コーディネーションセンターJapan's coordination center for responding to security incidents. During PHP2Shell it issued a security alert and listed three signs of intrusion to check.
- OrganizationsJPRS (Japan Registry Services)日本レジストリサービスThe organization that manages Japan's .jp domains. It recommends keeping your registration, since a dropped domain can be misused for fake sites.
K
- OrganizationsKinstaA managed hosting company that runs WordPress sites for its customers. It announced that it had handled the PHP2Shell fix itself.
- OrganizationsKISA incident report (Korea, 118)侵害事故届出(KISA・韓国)A channel run by South Korea's KISA for reporting hacking damage. You can report through the "incident report" page on the Bohonara website or by calling 118.
- OrganizationsKISA server care service (Korea)KISAサーバー点検サービスA service in which South Korea's KISA checks Korean small and medium-sized businesses for hacking programs such as web shells.
- OrganizationsKorea Copyright Commission韓国著作権委員会A Korean agency that runs a copyright counseling center (1800-5455). It says it offers free copyright education, counseling and legal consulting to sole proprietors and small businesses.
- OrganizationsKorea Internet & Security Agency (KISA)韓国インターネット振興院South Korea's agency for the internet and information security. It published response guidelines for businesses and temporary measures for a separate vulnerability.
L
- Servers & hostingLinux distributionディストリビューションA provider such as Ubuntu or Red Hat that bundles a server operating system with programs and hands them out. Some keep the version number as it is and add only the security fixes.
- Servers & hostingLogログA record kept on the server of when, from where and what requests arrived. To check for an intrusion, you must preserve the logs before any restart or rebuild.
- OrganizationsLolipop!ロリポップ!A Japanese rental server service. It reported that it had fixed PHP 5.3–8.5 and also turned off the upload progress feature everywhere.
M
- Websites & CMSMaintenance contract保守契約A website-care contract you pay your web agency for every month. Whether it includes PHP updates can only be known by reading the contract or asking.
- Servers & hostingManaged hostingマネージドホスティングA service where the hosting company takes care of server management, security fixes included. Even after a fix is applied, the version number on screen may stay the same.
- Vulnerabilities & incidentsMarket for lemons (information asymmetry)レモン市場(情報の非対称性)A situation where the seller knows far more about quality, so the buyer can't tell in advance whether something is good. Website work is also hard to see from the client side, so questions that demand checkable answers help close that gap.
- Vulnerabilities & incidentsMemory corruption (use-after-free)解放後使用(Use-After-Free)A flaw where a program keeps using memory it has already freed. PHP2Shell exploits the state left behind after an out-of-memory error.
- Settingsmemory_limit / post_max_sizeSettings that decide how much memory PHP can use and how large a request it can accept. PHP's official announcement suggested adjusting them as a temporary measure.
- OrganizationsMinimum Wage Commission (Korea)最低賃金委員会(韓国)The Korean body that deliberates on the minimum wage. PHPFree articles use its 2026 minimum wage (10,320 won an hour, 2,156,880 won a month) as the lowest rate for valuing people's time.
- Websites & CMSmultipart/form-dataThe data format used to upload files or submit forms. An error right after a suspicious request in this format may be a trace of an attack.
N
- OrganizationsNational Cybersecurity Office (Japan)国家サイバー統括室The Japanese government body in charge of cybersecurity. On October 21, it urged organizations to check whether their public websites use PHP and to prepare patches.
- OrganizationsNational Police Agency (Japan)警察庁Japan's police administration agency. It reports on the cyber threat situation every six months; in the first half of 2026, vulnerability-scanning access reached 13,687 per monitored address per day.
- Servers & hostingNetlifyA static site hosting service. The free plan gives 300 credits a month, and once they are used up, all your sites stop until the next billing cycle.
O
- Vulnerabilities & incidentsOptimism bias楽観バイアスThe human habit of believing bad things are less likely to happen to us than to others. The thought "nobody targets a small company like ours" comes from it too.
- Vulnerabilities & incidentsOutsourcing of personal data processing個人情報の取扱いの委託Handing the work of handling personal data to another company. Korea's Personal Information Protection Act (Article 26) requires a written ban on other uses, technical and administrative safeguards, and the client's consent before passing the work on; whether website work counts needs a legal judgme
P
- Servers & hostingPackage (software package)パッケージThe bundle unit used to install and update programs on a server. A package's changelog shows what fixes went into it.
- Websites & CMSPagefindA free, open-source tool that adds search to a static site. It supports Korean, Japanese and Chinese.
- Vulnerabilities & incidentsPatchパッチ / 修正版A fixed version of a program that closes a hole that was found. The patched releases for PHP2Shell are 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35.Pages that use this term 1
- Vulnerabilities & incidentsPersonal data breach notification (Korea, 72 hours)個人情報漏えい等報告A South Korean rule requiring a personal data leak to be reported to KISA within 72 hours. It covers leaks of 1,000 or more people's data, of sensitive or unique identifying information, and leaks caused by unlawful outside access.
- Vulnerabilities & incidentsPhishing emailフィッシングメールAn email that pretends to come from a trusted company to lure you to a fake site. Don't click the link; open the company's site yourself to check.
- Websites & CMSPHPThe programming language that runs website software such as WordPress on the server. If your website were a house, PHP would be its foundation.Pages that use this term 4
- Settingsphp -vA command that shows the PHP version on a server. However, it may differ from the PHP that actually runs your website, so do not rely on it alone.
- Websites & CMSPHP Compatibility CheckerA WordPress plugin that checks in advance whether your plugins and themes will work on a newer PHP version.
- OrganizationsPHP GroupPHP開発チームThe development team that builds and fixes PHP. It publishes security advisories and patched releases on its official site, php.net.
- Vulnerabilities & incidentsPHP release cycleリリースサイクルEach PHP version is supported for four years after release (two years of bug fixes plus two years of security fixes), and support ends on December 31. This rule was adopted in 2024.
- Servers & hostingPHP version switchPHPバージョン切替A hosting control-panel feature that changes the PHP version for each domain. In Xserver it is on the "PHP Ver. switch" screen, and in Lolipop! on the "PHP settings" screen.
- Settingsphp_admin_valueA way of locking a value in the PHP-FPM settings. It is used so the site's programs cannot change that value later.
- Servers & hostingPHP-FPMA way of keeping PHP programs running behind the web server. After fixing PHP, you have to restart it for the new version to take effect.
- Settingsphp.ini (PHP configuration file)php.iniThe configuration file that sets how PHP behaves. When you cannot update right away, temporary measures also go in this file or in the PHP-FPM settings.
- Vulnerabilities & incidentsPHP2ShellThe name for two vulnerabilities in PHP itself, disclosed in October 2026. They let an outsider run programs on the server without logging in.Pages that use this term 2
- Settingsphpinfo filephpinfo()A check file that shows the PHP version and server settings on screen. Anyone can view it, so delete it right after checking.
- Websites & CMSPHPSESSIDThe ticket number (a cookie) a site uses to tell visitors apart. An unnaturally long value in your records may be an attack attempt.
- OrganizationsPIPC (Personal Information Protection Commission, Korea)個人情報保護委員会(韓国)South Korea's government agency in charge of personal data protection. It sets out the criteria for reporting personal data leaks, while KISA receives the reports.
- Vulnerabilities & incidentsPlanning fallacy計画錯誤The human habit of estimating that future work will take less time than it really does. Thinking of a PHP version change as "just one button" is an example, and breaking the work into small steps improves the estimate.
- Websites & CMSPluginプラグインAn add-on program that gives WordPress extra features. A hole in PHP itself, like PHP2Shell, is not fixed by updating plugins.Pages that use this term 1
- OrganizationsPLURAA South Korean security company. It recommended blocking multipart requests sent to addresses that do not need uploads.
- Servers & hostingProcess (running program)プロセスEach program currently running on the server. If an unfamiliar process appears under a PHP worker, suspect an intrusion.
- Vulnerabilities & incidentsProof of concept (PoC)実証コードDemonstration code that shows whether a vulnerability can really be exploited. Once it is published, attack attempts increase, and some of it may be fake.
R
- Vulnerabilities & incidentsRansomwareランサムウェアAn attack that locks the files on a server or computer and demands money to unlock them. In the first half of 2026, about 60% of the affected companies in Japan were small and medium-sized businesses.
- Websites & CMSRecovery mode (recovery link email)リカバリーモードA recovery link that WordPress may email to the administrator when a critical error occurs. Opening it lets you turn off the plugin that caused the problem.
- Servers & hostingRegistrarレジストラ・指定事業者The company you buy and renew a domain through (in Korea, for example, Cafe24 or Gabia). Changing a domain's owner, transferring it or renewing it follows this company's procedures.
- Servers & hostingRestart再起動Turning a program off and on again. Even after you update PHP, the old program keeps running until you restart it.
S
- OrganizationsSakura InternetさくらインターネットA Japanese rental server and cloud company. It announced that it had fixed PHP on its rental servers, including versions that have reached end of life.
- Japanese termsSecurity alert注意喚起A notice from a security agency saying, in effect, "this risk exists, so take action." The notice JPCERT/CC issued during PHP2Shell is one example.
- Servers & hostingSelf-managed server自社サーバーA server that a company or its web agency sets up and manages itself. The hosting company will not fix it for you, so you need to decide who is in charge of it.
- Servers & hostingSender reputation (email rejection)迷惑メール送信元判定When your server or contact form is used to send spam, receiving mail servers treat your company's email as a spam source and reject it. Your quotes and invoices then stop reaching the other side.
- Servers & hostingServer environment change (data reset)サーバー環境の変更(データ初期化)At Korean hosts such as Cafe24 and Gabia, changing the PHP version moves you to a new server environment and erases your existing files and database. Before changing it, you need a backup and a migration plan.
- Servers & hostingServer-side languageサーバーサイド言語The language of the programs that run on the server side when a website is displayed. 75.2% of South Korean (.kr) sites use PHP (W3Techs, 2026-10-24).
- Servers & hostingSession fileセッションファイルA file where the server briefly notes a visitor's connection state. In the PHP2Shell attacks, attempts to plant a web shell here were reported.
- Settingssession.upload_progress.enabledA PHP setting that records the progress of file uploads. Turning it off by setting it to 0 is one of the temporary measures for PHP2Shell.
- Settingssession.upload_progress.nameThe setting that sets the name used by the upload progress feature. Sites that changed it from the default are not blocked by Cloudflare's protective rules.
- Servers & hostingShared hosting共用レンタルサーバーA rental server where one machine is shared by many customers. The hosting company manages the foundation, such as PHP, so during PHP2Shell it was the hosting company that applied the fix.
- Websites & CMSSimply StaticA plugin that converts a WordPress site into HTML files and exports them. With the free tool alone, forms, search and comments do not work.
- Websites & CMSSite HealthサイトヘルスA WordPress dashboard feature that shows details such as the server and the PHP version. You can check the PHP version under Tools → Site Health → Info → Server.
- Servers & hostingSSH (Secure Shell)SSHA way of connecting to a server remotely and giving it commands. You need it to use command-line tools such as WP-CLI.
- SettingsSSL/TLS (encrypted connection)SSL/TLSTechnology that encrypts the connection between visitors and a website; an address starting with https means it is in use. The US FTC advises checking security features like SSL/TLS and email authentication when choosing a host.
- Websites & CMSStaging site (test copy)ステージング環境A test copy of your live site. You try updates here first and apply them to the live site only if nothing goes wrong.
- Websites & CMSStatic site静的サイトA website that shows pages made in advance, exactly as they are. It does not use PHP, so PHP's end of life and holes like PHP2Shell do not affect it.
- Websites & CMSStatic site generator (Astro, Eleventy)静的サイトジェネレーターA tool that builds an HTML site in advance from article files. Astro and Eleventy both have official guides for moving from WordPress.
- Vulnerabilities & incidentsStatus quo bias現状維持バイアスThe human tendency to keep things as they are. Losing contact with your web agency and spending months thinking "let's wait a little longer" is one example.
T
- Websites & CMSTheme (WordPress)テーマThe design program that sets how a WordPress site looks. Old themes may not support newer PHP and can leave the screen completely white.
- Websites & CMSTwo-factor authentication二段階認証A login method that asks for a second check, such as a code sent to your phone, on top of your password. It blocks logins even if your password leaks.
U
- Vulnerabilities & incidentsUnauthorized access不正アクセスGetting into someone else's server or account without permission. In an IPA survey, the top cause of unauthorized access at Japanese small businesses was unapplied patches (48.0%).
- Websites & CMSUploads folder (wp-content/uploads)アップロードフォルダ(wp-content/uploads)The folder where photos and files uploaded to WordPress are stored. PHP files do not belong there, so finding one is a suspicious sign.
- Servers & hostingUptime monitoring稼働監視Automatically and continuously checking that a website stays up and opens. PHPFree's worry-free operation plan includes uptime monitoring along with server and SSL.
V
- Servers & hostingVercelA website hosting service. The free Hobby plan is only for personal, non-commercial use, so a company site needs the paid Pro plan.
- OrganizationsVerizon DBIRThe data breach report that U.S. telecom company Verizon publishes every year. The 2026 edition said 31% of breaches started with a software vulnerability.
- Servers & hostingVPS (virtual private server)VPSA way of splitting one server so that each user can run it like their own server. You get more freedom, but you have to fix the foundation, such as PHP, yourself.Pages that use this term 1
- OrganizationsVulnCheckA U.S. vulnerability intelligence company. It reported attempts in the PHP2Shell attacks to plant web shells in session files, and fake attack demonstration code on GitHub.
- Vulnerabilities & incidentsVulnerability脆弱性A security hole created by a mistake in how a program was built or designed. If it is left alone, others can sneak in or steal information.Pages that use this term 3
W
- Servers & hostingWAF (web application firewall)WAF(ウェブアプリケーションファイアウォール)A filter that screens out suspicious requests before they reach your website. It reduces attacks but cannot replace a patch.
- Vulnerabilities & incidentsWeb shellWebシェルA backdoor file an intruder secretly places on a server to control it remotely. Patching does not remove it.
- Servers & hostingWHOISA service for looking up a domain's registration details, such as the registrant, the registrar and the expiry date. Korea's .kr domains are looked up on the WHOIS run by KISA.
- OrganizationsWizOne of the security companies that discovered PHP2Shell. It demonstrated that the attack works against systems such as the latest WordPress.
- Websites & CMSWordPressワードプレスThe most widely used website management software in the world. It runs on PHP, so a hole in PHP affects WordPress too.Pages that use this term 4
- Websites & CMSWordPress major releaseメジャーリリースA big WordPress version that adds new features. A release cycle usually takes about four months, so roughly three come out a year, and each one means checking plugins and pages.
- Servers & hostingWorker (worker process)ワーカーEach individual PHP program that actually handles incoming requests. After changing a setting or fixing PHP, you must restart every worker.
- OrganizationsWP EngineA managed hosting company dedicated to WordPress. It says you can switch the PHP version for each live or test environment in a few seconds.
- SettingsWP_MEMORY_LIMITThe setting that caps how much memory WordPress can use. When a lack of memory is the cause, try raising it to 128M–256M.
- Websites & CMSWP-CLIA tool for managing WordPress with commands. It can also check whether WordPress's files are intact (wp core verify-checksums).
- Websites & CMSwp-config.phpThe file that holds WordPress's basic settings. The three lines that turn on the debug log also go in this file.
X
- OrganizationsXintA South Korean security company. It explained how to see the real PHP version with a check file, and the risks of removing the memory limit.
- OrganizationsXserverエックスサーバーOne of Japan's leading rental server companies. It applied the fix to PHP 5.6–8.5 on its shared servers and advised that VPS users must fix their own.
- Servers & hostingXserver Site SecurityサイトセキュリティA scanning feature Xserver offers on some plans. It checks for site tampering and malware, and is free for one site.
#
- Settings.htaccessA configuration file that sets how the web server behaves, folder by folder. Intruders often change it secretly, so a recent change is a suspicious sign.
- Websites & CMS"This site may be hacked" warningハッキング警告The warning Google adds to search results for sites it suspects have been hacked. It only goes away after you fix the whole site and request a review.
