PHP2Shell: Your PHP App Can Be Secure—and Still Be Vulnerable

Two critical bugs in PHP's runtime can bypass otherwise secure app code. What broke, which versions are fixed, and how to check your deployments.