Patrick Posner

Developer & DevOps guy
Building &

[Patrick Posner @patrickposner_]

@jonathan_dejong Yeah, agreed.

I was super motivated at first, but after the 40th email, I was like... well, I guess a dashboard notification and a general email will do just as well! 😂

[Patrick Posner @patrickposner_]

The PHP vulnerability affected everyone in the WordPress ecosystem (and beyond that!).

Many people (including me) had a long, exhausting day, and that's fine; keeping our customer sites and data secure is (and should be) our top priority.

But it really pisses me off to see certain hosting providers claim they were safe "immediately" and use that to make a few extra sales.

Instead of doing this bullshit, why not make it accessible to everyone? Tons of reputational damage around WP could have been prevented (and yes, I know it was PHP and not WP).

You know what?

Zero of our customers have been impacted AT ALL; their static versions kept running, we disabled booting up WP during the patch implementation, and that's it.

Do I comment under every post that "We have been safe immediatly"? No, because we are all in this together, making the web a better (and safer) place - at least I thought so.

Sorry, I'm just a bit tired.

[Patrick Posner @patrickposner_]

@gridpane Alright, I see myself out! Gonna try getting popular by dancing on TikTok now.

[Patrick Posner @patrickposner_]

Yes, 100% this!

We've done the same, but we also clearly communicated it as the "first step".

I would also love to see PHP 7 become a thing of the past already (it should have been a long time ago!), but it would have been even better to show the world that WordPress is a community.

Imagine if all the big hosting companies had collaborated - WordPress would have been the first PHP-based software to say: we've got you, we work together, and we'll make sure your sites are safe.

Instead of pointing fingers when one company needs more time, we should make this a collaborative initiative and get it done for 40% of the web!

I know, I'm dreaming here, haha.

[Patrick Posner @patrickposner_]

@lostdesign @JackEllis That's why I brought it up, actually 😂

[Patrick Posner @patrickposner_]

@mstefan "Did you enable that Cloudflare rule that was shared on X?" Yeah, sure, we are safe now.

[Patrick Posner @patrickposner_]

@jonathan_dejong That's so cool! Honestly, way better than what we did! 😅

At least we told people about it and got straight to work, but I love the idea of publishing the full timeline!

[Patrick Posner @patrickposner_]

@Teku 100% - that's why I stopped checking LinkedIn this week.

You can't argue with these people - everyone is trying to sell you something right now.

[Patrick Posner @patrickposner_]

@deviorobert Hahahaha, made my day! 😂

[Patrick Posner @patrickposner_]

@hansmast @thesamparr Way to go! (I'm biased, though; I'm the founder of Simply Static 😅)

[Patrick Posner @patrickposner_]

@philsola_123 I feel that.

I've built my own and distributed it to our fleet right away, and now I'm sitting here, rolling out the "official" one 😅

[Patrick Posner @patrickposner_]

@_baretto @TiinyHost About time! Get @SimplyStaticWP to convert it, then push straight to @TiinyHost

[Patrick Posner @patrickposner_]

@brendanocwp Fixed it for you:

[Patrick Posner @patrickposner_]

@learnwithmattc @wordpressdotcom That's nice, but it would have been even nicer if they also shared that with the whole world by updating the official WordPress Docker image as well: https://t.co/9p4iUbfXKz

[Patrick Posner @patrickposner_]

@heyandras 🔥

[Patrick Posner @patrickposner_]

@danielhayesmith I am a bit nervous, though - will the infrastructure providing the updates hold up? 😅

[Patrick Posner @patrickposner_]

@robinpietersen Can't wait for "Calm November" - the constant pressure ain't fun! 😂

[Patrick Posner @patrickposner_]

@AlexStandiford I sure hope so! 😂

[Patrick Posner @patrickposner_]

@remkusdevries @o_b @IntCyberDigest It's also scary for all of us - I would lie if I told everyone that I'm just sitting here sipping coffee - no, we also have sites running on PHP 7.4 that we need to migrate now, and it also impacts the (PHP-based) web as a whole - I'm as scared as everyone else! 😂