<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: Webfiletools_de</title><link>https://news.ycombinator.com/user?id=Webfiletools_de</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 22 Oct 2026 01:52:26 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=Webfiletools_de" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by Webfiletools_de in "Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming"]]></title><description><![CDATA[
<p>One gotcha for anyone applying this tonight: on a lot of Debian/Ubuntu-style setups the CLI and PHP-FPM read different php.ini files (for example /etc/php/8.x/cli/ vs /etc/php/8.x/fpm/), so "php -i" from a shell can show it Off while the web side still has it On. Check it through a phpinfo() page or the FPM binary itself, and remember to reload php-fpm afterwards. On shared hosting where you can't touch the main ini, it should be settable per directory in .user.ini, but that file is cached for a few minutes by default, so give it time before testing. And as others said, treat it as a stopgap until the actual patch lands.</p>
]]></description><pubDate>Wed, 21 Oct 2026 02:54:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=50175518</link><dc:creator>Webfiletools_de</dc:creator><comments>https://news.ycombinator.com/item?id=50175518</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50175518</guid></item></channel></rss>