Blog

Notes from the engineer

What is happening on the web that affects your site, explained without the jargon, and what we do about it for the sites we build and run.

Security · Opinion

PHP2Shell is the case for not building your next site on WordPress

PHP2Shell exposed the real weakness of WordPress hosting: the site owner cannot fix the layer that broke. Here is how Rune builds and runs sites so that a critical patch is an afternoon, not a support ticket.

7 min readRead
Security · Guide

PHP2Shell: what to do if your website runs on WordPress (or any PHP)

A plain-English checklist for PHP2Shell (CVE-2026-109618 and CVE-2026-109619): how to find your real PHP version, exactly what to ask your host, what to do on your own server, and what to check after you patch.

8 min readRead