Is my PHP or Next.js site exposed to this month's remote code execution flaws?
This month brought urgent security releases for PHP and for Next.js, for flaws that let a stranger run code on your server. Public exploit code for the PHP ones went up on GitHub within days.
Patching sounds simple until the site runs an old PHP version your host stopped updating, or a plugin breaks after the update and takes checkout down with it.
We do the patch for you, on a copy of your site first. We did exactly this for a client's store this weekend, on an old PHP version.
What you get
- A check of exactly what your site runs, including the PHP or Node and Next.js version, the framework, and every plugin and package.
- Each one matched against this month's exploited and critical advisories, worst first.
- The patch applied on a copy of your site, then on the live site once the copy passes.
- On an old PHP version, a backported fix where one exists, or a clear upgrade plan where it does not.
- Before and after checks that your pages, forms and checkout still work.
- A short written note of what was patched and anything still waiting on you.
Price, timing and the guarantee
PHP or Next.js security patch
$299
Patched within 2 business days of getting access, tested on a copy of your site first.
If we cannot patch the flaws we list for your site, or the site does not work the same afterwards, we roll it back and you get a full refund.
Rather talk first? Book a 15-minute call.
Payment runs through Stripe. Matt Turley will email you within one business day to set up access to your host. We never ask for a password by email.
Why people are asking for this
Posts we read on October 26, 2026. Upvotes as of that day.
“Security advisory: Critical remote code execution vulnerabilities, update now”
Hacker News, 1,559 upvotes
“Today's PHP security release, and how we're strengthening security”
Hacker News, 816 upvotes
Who does the work
Matt Turley does this work himself, with AI agents doing the legwork, and he checks everything before it reaches you. Continuum builds and looks after software for small businesses and founders. Questions before you buy: hello@uxcontinuum.com. Everything we offer.