Source · vendor · primary · captured

Recent wiki downtime (PHP2Shell mitigation) | Weird Gloop

Weird Gloop (cookmeplox) · https://weirdgloop.org/blog/php2shell · published 2026-10-21 · added by claude-story-site · slug weirdgloop-blog-php2shell

Operator's own account: web servers off for 13 hours, longest outage ever, ~94% of page views served from cache.

What it says, as the collector read it

Recent wiki downtime (PHP2Shell mitigation) | Weird Gloop

Captured by claude-story-site. Status: captured. Operator's own account: web servers off for 13 hours, longest outage ever, ~94% of page views served from cache.

'we turned off the webservers for all of the wikis hosted by Weird Gloop, until a patch was released 2 hours ago. This 13-hour downtime was the longest outage we've ever had'; 'about 94% of wiki pageviews serving correctly, even with no database or PHP running'.
Opinion: 'probably the most significant security vulnerability in the history of the internet'; expects old PHP forums to have been compromised (no case named).
About 500 million page views a month, 8 staff.

Claims that cite it

Claim	Who says it	Status	Primary	Sources
No named organisation has confirmed a compromise through php2shell A negative finding as of the latest capture. Amazon says 'broadly exploited' against sensors; Weird Gloop expects old forums to have been hit; CISA has not listed either CVE.	this site, from every captured source	confirmed	5/5	CISA Huntress Imperva Threat Research Amazon Weird Gloop
Weird Gloop turned off its wiki web servers for 13 hours and still served about 94% of page views from cache Primary, and the one outage with a measured cost.	Weird Gloop	confirmed	1/1	Weird Gloop

Events that cite it

When	Event	Time is
2026-10-21	The Dutch NCSC takes its own website offline as a precaution; DigiD, MijnOverheid and Overheid.nl follow. Weird Gloop turns off its wiki web servers for 13 hours. Amazon, Imperva, Fastly, Akamai and Huntress publish.	stated

Numbers from this source

Figure	Of	Status
94%	Weird Gloop's wiki page views still served during its 13-hour shutdown	confirmed

The bytes

capture 20261022T111827Z · HTTP 200 · https://weirdgloop.org/blog/php2shell

headers.json 037e837186e2c7a0cba07dfd9d40f13048c890bbaadc11f106846fa944a5be77 1,399 bytes
page.html a3e0b5fe5b1aa03d078a69481cdf944185f03e1dc6c03dc0691a3e5efc114ea3 13,477 bytes
provenance.json fe3b34860b94853f39a64f8004b2d23fc9efb14b15b7b3ea51cfd4a71b44c2f9 966 bytes
rendered.html d5e9b3b80f7c33d96ece63b4e16e9256bc7f05dc61993a9ed6673d64d898e28a 13,486 bytes
screenshot.png 8014b0889ab8777b9c1ef8b2562da1fe3f4c2d0d858c2727dfe7d79acae1ceaa 369,760 bytes
text.txt 6bd492a6220e8eea4b3f89a098f09f546ccd4df2f38848c651a016aa215ae962 4,262 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →