Email Marketing Newsletter: https://xitter.cf/t.co/sQcFR4FQJL | WordPress & WooCommerce Newsletter: https://xitter.cf/t.co/J4X2IYwJAn | Technical SEO Geek & ❤️ ☕
Bangor, Northern Ireland
Joined May 2010
- Tweets25.9K
- Following549
- Followers2.3K
- Likes27.7K
Pinned Tweet
3️⃣ This week's "Top 3 Links" from "All About Email", Issue 261:
1) Taxi for Email Converter - linkedin.com/posts/filip-bis…
2) Gmail AI Inbox Arrives! - emailexpert.com/gmail-ai-inb…
3) Screaming Into The Void - send-it-right.com/blog/email…
Full newsletter below. 👇
newsletter.allabout.email/p/…
Simon Harper ☕💻 retweeted
Never deleting this app.
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol
xitter.cf/JustLingonberry/status…
you're a real dev for sure!
Simon Harper ☕💻 retweeted
Until now, any layout experiments I'd do on a live site, would live inside an un-indexed draft page.
In Delta, these mid-flight ideas go to the Sketchbook. A safe environment to draft layout ideas without messing with your site's pages.
Collaborate with your agent on thetchbook and organize your material in boards. Share your explorations with colleagues or Clients. It just works.
Simon Harper ☕💻 retweeted
✅ PHP security update completed across xCloud.
Official PHP patches are now applied on all managed servers, NGINX and OpenLiteSpeed. Our earlier mitigation kept servers protected during the rollout.
No action needed. 🛡️
xcloud.host/php2shell-vulner…
Simon Harper ☕💻 retweeted
Long day for anyone running PHP sites.
After today's PHP security advisory, a lot of people told us they used Novamira to check the integrity of their WordPress sites. With full access, an AI agent can go through files and the database, not just what the dashboard shows.
So we're releasing free skills that walk AI agents through that check. @novamira_ai also now tells the agent when a site runs an affected PHP version.
Simon Harper ☕💻 retweeted
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Simon Harper ☕💻 retweeted
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
Unvalidated AI output (author admits in replies: omp with glm5.3 + ds4), not a lab result. Its screenshot says both CVEs are fixed; the 'surviving paths' need unserialize() of attacker data or an app LFI. Patch per php.net: php.net/archive/2026.p…
Simon Harper ☕💻 retweeted
Days like today, it pays to have a team that cares for your sites like our own.
We’re rolling out PHP patches and mitigating risks.
No action needed from customers.
Rocket.net sites also benefit from @Cloudflare Enterprise protections:
blog.cloudflare.com/php-vuln…
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
A huge thank you to the Laravel team for everything they've done (and are still doing) in response to the critical PHP security advisory. We took preventative measures yesterday and I was very happy to receive a "we are handling it" email from them. Well done to all involved.
Simon Harper ☕💻 retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Simon Harper ☕💻 retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
PHP 8.1 and below are NOT patched: patchstack.com/articles/php-…
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
Today's PHP security release won't reach sites on end-of-life versions. Before you move your WordPress site to a newer PHP, ask your AI what will break, and let it fix it so you can upgrade.
We tested it with @novamira_ai
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
⚠️ Important: critical PHP vulnerability release imminent. ⚠️
Significant impact across WordPress, Drupal, Joomla, Magento.
Be ready to update your PHP version. Watch this channel for more info.
Simon Harper ☕💻 retweeted
3️⃣ This week's "Top 3 Links" from "All About Email", Issue 261:
1) Taxi for Email Converter - linkedin.com/posts/filip-bis…
2) Gmail AI Inbox Arrives! - emailexpert.com/gmail-ai-inb…
3) Screaming Into The Void - send-it-right.com/blog/email…
Full newsletter below. 👇
newsletter.allabout.email/p/…
Simon Harper ☕💻 retweeted
Woo peeps: We've moved the Purple theme development from it's own repo to the WooCommerce monorepo (for cleanliness and agent reasons).
But you can still get it on all the normal theme directories 👍
developer.woocommerce.com/20…
Simon Harper ☕💻 retweeted
At the 2025 Shopify conference, everyone I met was really positive about how their app was doing. At the same event this year, several people admitted to me that they're no longer growing.
I wanted to know if this is backed by data so I did the research and discovered that things have got harder. The problem is the number of apps is growing more than the amount of new stores, so app companies aren't benefitting from Shopify's success.
Read more here: barn2.com/blog/shopify-app-s…
