Two flaws in PHP can hand an unauthenticated attacker remote code execution, and PHP says a demonstrated attack on Apache with mod_php fires before the website’s own code runs.... Read more »