PHP Security Update

Last updated: October 21, 2026

We’re aware of the recently disclosed PHP vulnerability and are upgrading the websites we host and support to protect them. Because this issue is already being targeted, we’re moving quickly, and some websites may be briefly unavailable while we work.

What happened

A security vulnerability was recently disclosed in PHP, the widely used web software that powers a large share of the internet, including most WordPress sites. It isn’t tied to your website’s own code or anything you did. It’s an industry-wide issue affecting millions of websites.

The fix is being delivered through current versions of PHP. Older versions of PHP generally don’t receive official security updates, so websites running on them need to move to a newer version to be protected. Attackers are already scanning the internet for websites they can exploit, which is why we’re acting now rather than waiting.

What we’re doing

• Reviewing every website we host and support.
• Upgrading websites to current, secure versions of PHP and moving them onto updated, protected servers.
• Testing each website after its upgrade and fixing issues as we find them.
• Applying additional security patches as they’re released.
• Contacting clients whose websites need more work.

What it means for your website

Many websites will move to the newer version with little or no visible change. Others, especially older websites, may not work correctly on the newer version right away.

Those websites may need code updates before they can run on a current version, and in some cases a larger update. While we work on them, they may be unavailable or show a maintenance page with our contact information. This protects your website, and the other websites on our servers, from attack. We’ll contact you about the options for your site.

Do I need to do anything?

If you’re on one of our maintenance plans, there’s nothing you need to do. We’re taking care of it and will be in touch about any steps needed for your site.

For all other clients, we’re reaching out to many of you as well. If your website is showing a maintenance page, or you haven’t heard from us and have questions, contact us and we’ll talk through your website with you.

Common questions

• Has my website been hacked?

  This notice doesn’t mean your site has been affected. We’re upgrading websites to protect them before the issue can be used against them. If we see anything that needs your attention, we’ll contact you directly.

• Is this something Sharp Innovations caused?

  No. The vulnerability is in PHP itself, software used by millions of websites around the world. It affects websites everywhere, regardless of who built or hosts them.

• Why can’t you just patch my website?

  The problem is in PHP, the software your website runs on, not in your website’s own files. The fix comes with current versions of PHP, so protecting a website means moving it to a current version. Older websites sometimes need code updates to work on the newer version.

• Will my website go down?

  Possibly. Some websites may be unavailable or show a maintenance page while we work on them. If yours needs more than a routine upgrade, we’ll let you know.

• Someone at our company got an email about this. What does it mean?

  We’ve emailed the main contacts for the websites we host about this update. This page has the same information. If you have questions about your company’s website, contact our support team or call 717-290-6760.

• My website is showing a maintenance page. What should I do?

  Your website is being protected, along with the other websites on our servers, while it’s updated. Contact our support team or call 717-290-6760 and we’ll walk you through where things stand and the options for your site.

• How will I hear from you?

  We’ll reach out by email or phone if your website needs anything. You can also check this page for updates, or contact our support team any time.

Thank you for trusting us with your website. We’ll keep this page updated as things progress.