News by Levels · Level 1 · Student worksheet

Important Fixes for Website Software

Name: __________________________ Date: __________________

Read the story

The PHP team released urgent security fixes on October 21. PHP runs many websites.

Two serious problems could let attackers run code on a server without signing in. Website owners should check that their hosting service has installed the fixes.

Source: PHP security team, 2026-10-21. https://www.php.net/archive/2026.php

Read and practise

1. Why are the security problems serious?

   1. Change only the appearance of a news headline
   2. Read only information already made public
   3. Run code on a server without signing in

2. What should website owners check?

   1. Whether the hosting provider has installed the PHP fixes
   2. Whether they have rewritten their homepage
   3. Whether they have deleted their browser history

Your turn

Why would editing a website’s articles not be enough to fix this issue?

________________________________________________________________
________________________________________________________________
________________________________________________________________

Read online: https://newsbylevels.com/news/php-critical-security-fixes-october-2026/level-1/