Plate V. Field notes

What goeswrong, explained.

Plain English on the things that break, slow down or get into small business websites, and what to ask whoever looks after yours.

Security flaw , 6 minute read

php2shell: the big PHP flaw, in plain English

Two flaws in PHP, the language most small business websites run on, let a stranger run their own commands on the server without logging in. Here is what they do, how they were fixed, and what to ask your host.

Read the article

On the list.

One for each part of the report, written next.

  1. Why is my website slow?

    What the speed checks measure, and the few changes that make the biggest difference.

  2. The security settings every site should have

    Five small server settings, what each one stops, and how long they take to add.

  3. Do you really own your domain?

    Who holds it, when it runs out, and how businesses lose theirs without noticing.

  4. Cookie banners that actually work

    Why most banners let tracking run before anyone says yes, and what UK rules ask for.

  5. A website everyone can use

    The quick fixes that let people who cannot see the screen use your site.

Is anything wrong with your site?