PHP2Shell: Take Your Site Down the Right Way
The biggest webmaster story of the last 48 hours is a security problem. On October 21, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical vulnerabilities, nicknamed PHP2Shell. PHP is the programming language that runs WordPress, so if your site is on WordPress, it is affected. Sites have gone offline to install or prepare for the fix, including European Union (EU) government sites.
If you go offline to patch, Google has clear advice. John Mueller says to use HTTP 503 instead of letting responses time out / 404 / 500. A 503 is a server code that means "temporarily closed, come back later." He also notes this can be done outside of PHP, by pointing DNS elsewhere, or at a CDN, which matters because a broken PHP can't send the message itself. Google's guide says a 503 is meant for urgent shutdowns of 1-2 days, a few days at most, and says robots.txt must never return 503. Search Engine Journal repeated the same reminder.
Rankings Keep Churning
Search results have been jumpy for a full month. Our tracker has stayed in the moderate-high range since late September and is climbing again. Today's early reading is 7.7, but only 5 of 12 providers have reported, and they disagree sharply: Serpstat and Wincher show 10/10 while SimilarWeb shows 3.2. Barry Schwartz at Search Engine Roundtable reported rising chatter on October 20-21 and wrote that he thinks we have an unconfirmed Google update going on. Some site owners saw higher rankings but with 60 to 70% fewer clicks than normal. That pattern usually points to AI Overviews answering the question before anyone clicks.
Treat tool data with caution. According to Nozzle, a share of Google results sent to rank trackers has been complete but incorrect, peaking at 25% and running at 5-11% a day since October 1.
What to Do
- Ask your host today whether your server runs a patched PHP version.
- Use a 503, not an error page, if you take your site offline.
- Trust Search Console clicks over third-party rank trackers this week.
