Website security · PHP · Python engineering
PyDev Solutions patches vulnerable PHP sites, audits website security and keeps business websites and applications updated, monitored and backed up. When it's time, we migrate them off legacy PHP onto safer, low-maintenance Python technology.
$ pydev check https://example.com scanning runtime, CMS, TLS, headers, backups… ✕ PHP 8.1.31: end of life, exposed to php2shell ✕ 7 plugins with known vulnerabilities ! TLS certificate revoked by issuer ! No off-site backup in 41 days ! Missing security headers (CSP, HSTS) ✓ Fix plan: patch → harden → monitor
Security advisory
CVE-2026-109618 and CVE-2026-109619 let attackers run code on PHP servers that haven't been upgraded. They affect WordPress, Drupal, Joomla, Magento, Laravel and custom PHP sites alike, and exploitation attempts are already being reported.
Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 (21 October). CMS auto-updates don't install them: the server's PHP itself must be upgraded.
GoDaddy revoked 404,607 TLS certificates on 21 October after issuance-policy failures. Affected sites show browser security warnings until the certificate is replaced.
Separately, eMudhra is leaving the public TLS certificate business after eight of its intermediate CA keys were found to be weak. Its customers need a new certificate authority.
Services
From urgent fixes to long-term care, one team handles the whole lifecycle of your website.
Urgent patching for php2shell and other PHP vulnerabilities, upgrades from end-of-life PHP versions, and clean-up after a compromise.
PHP fixesA clear, prioritised report on your site's real risks (runtime, CMS, plugins, TLS, headers, access, backups) with a fixed-price fix plan.
Security auditsCare plans that keep your site patched, monitored, backed up and fast, for sites we built and sites we inherit.
Maintenance plansVulnerable npm and Go module dependencies patched, critical updates shipped and runtimes kept on supported versions.
Application maintenanceMove off ageing PHP and plugin sprawl to a modern, low-maintenance stack without losing content or search rankings.
How migration worksPython back ends that stay fast under load: Django and FastAPI applications, REST APIs, integrations and low-latency services on AWS.
Slow pages traced to the queries behind them: N+1 queries removed, missing indexes added and PostgreSQL or MySQL tuned, with before-and-after timings.
Native iOS apps together with the cloud services behind them, designed as one system so the app feels fast and reliable.
PHP to Python migration
We rebuild ageing PHP websites on modern, secure technology, with your content, URLs and search rankings carried over.
PHP itself can be run securely; the risk is an outdated, unmaintained stack. If your site is better kept in PHP, we'll tell you and maintain it properly.
We inventory pages, URLs, plugins, data, integrations and traffic.
Target stack, timeline and price, in writing.
Your current site stays live while the new one is built.
Pages, media, users and forms move over; every old URL is mapped to a 301 redirect.
DNS switch with no downtime, Search Console checks, then hand-over or a care plan.
Why PyDev Solutions
PyDev Solutions is a Python engineering company. We build web platforms, APIs and iOS apps, and we keep the websites companies depend on secure and up to date.
Patched runtimes, least-privilege access, security headers and tested backups are standard, not an upsell.
Scope, timeline and price are agreed before work starts. No surprise invoices.
Code in your repository, accounts and domains in your name, documentation at hand-over. No lock-in.
You talk to the people doing the work, with no account-manager layers or ticket ping-pong.
FAQ
If your site runs on PHP and the server hasn't been upgraded to PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35 or later, assume it is exposed. CMS and plugin auto-updates don't fix it: the PHP runtime on the server has to be upgraded, and PHP 8.1 and older get no fix from the PHP project. Send us your website address and we'll check it for you.
Yes. Active security issues get priority. We upgrade or mitigate first (patched PHP release, firewall rules, isolation), check for signs of compromise, then plan the longer-term fix.
Server and PHP versions, CMS core, plugins and themes, TLS certificates and configuration, security headers, exposed files and admin panels, user accounts and access, backups, and email DNS records. You get a prioritised report in plain language with a fixed-price fix plan.
Yes, that is a common starting point. We begin with an audit, fix anything critical, then put the site on a maintenance plan. PHP sites included.
Not when it's done properly. Every existing URL either keeps its address or gets a permanent (301) redirect, titles and metadata carry over, and we monitor Google Search Console after launch.
Every project gets a fixed written quote after the initial check. Maintenance is a fixed monthly or yearly fee based on the size and criticality of the site.
Contact
Tell us your website address and what's worrying you. For a small fixed fee, we check it and reply with what we found and what we recommend.
Existing customer? Visit support.pydevsolutions.com.