“Should I build on Magento or WooCommerce?” We get asked this a lot, and the honest answer is the one nobody wants: it depends. But it depends on specific, knowable things — so here’s how we actually …
Security update
You may have seen news this week about "PHP2Shell", a pair of critical security flaws in PHP. PHP is the language that runs WordPress, Magento and a large share of websites worldwide. A few of you have been in touch about it, so I wanted to update everyone.
The short version: your website is protected and you don't need to do anything.
The flaws are in PHP itself, not in any particular website or host, so they affect sites everywhere. The PHP team gave advance warning on Tuesday, which meant we had our plan ready before the fix arrived. When the patched versions were released on Wednesday afternoon, we started applying them across the servers we manage straight away. That work is now complete.
Martin Shelton, Velocity Web
