# Source: ثغرات PHP تفتح الباب للقراصنة.. هل موقعك الإلكتروني محمي؟ – شبكة بلجيكا 24 الإخبارية

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

بلجيكا 24: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ثغرات PHP تفتح الباب للقراصنة.. هل موقعك الإلكتروني محمي؟ – شبكة بلجيكا 24 الإخبارية

**بلجيكا 24** · [https://www.belg24.com/%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-%D8%A8%D9%8A-%D8%A5%D8%AA%D8%B4-%D8%A8%D9%8A-%D9%86%D8%AA%D8%A7%D8%A6%D8%AC-%D9%81%D8%AD%D8%B5-%D8%A8%D9%84%D8%AC%D9%8A%D9%83%D8%A7-24/](https://www.belg24.com/%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-%D8%A8%D9%8A-%D8%A5%D8%AA%D8%B4-%D8%A8%D9%8A-%D9%86%D8%AA%D8%A7%D8%A6%D8%AC-%D9%81%D8%AD%D8%B5-%D8%A8%D9%84%D8%AC%D9%8A%D9%83%D8%A7-24/) · published 2026-10-23 · added by `curator@php.newsroom` · slug `belg24-d8-ab-d8-ba-d8-b1-d8-a7-d8-aa-d8-a8-d9-8`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261029T094207Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). An Arabic-language Belgian news-network article (Belgium 24, 23 October) in which the outlet's technical team reports on a check of its own server env...

## What it says, as the collector read it

#### ثغرات PHP تفتح الباب للقراصنة.. هل موقعك الإلكتروني محمي؟ – شبكة بلجيكا 24 الإخبارية

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `eg/news/belg24/d8-ab-d8-ba-d8-b1-d8-a7-d8-aa-d8-a8-d9-8a-d8-a5-d8-aa-d8-b4`, snapshot `20261029T094207Z`. Copied byte for byte; every file's sha256 is in `captures/20261029T094207Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

An Arabic-language Belgian news-network article (Belgium 24, 23 October) in which the outlet's technical team reports on a check of its own server environment after the PHP security updates: it analysed 73,306 files, matched core WordPress files against official lists, reviewed web logs and file permissions, confirmed the updates were applied in the environment checked, found no malicious files, and corrected 385 files whose permissions let 'others' write, with the SHA-256 hashes of the 382 files in the second batch compared before and after to show contents were untouched. It also restates, citing a joint European statement and the PHP foundation, that the two flaws may allow remote code execution and score 9.2, and that updating WordPress alone does not fix them.

> ولم تسجل أداة الكشف ملفات خبيثة ضمن التحليل المنفذ.

_Curator's translation:_ "The detection tool recorded no malicious files in the analysis performed."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرات PHP تفتح الباب للقراصنة.. هل موقعك الإلكتروني محمي؟ – شبكة بلجيكا 24 الإخبارية". Selected mechanically, not read by a person.

#### Capture notes

Language `ar`. A self-report about one outlet's own server, not an independent finding about the incident. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261029T094207Z · HTTP 200 · https://www.belg24.com/%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-%D8%A8%D9%8A-%D8%A5%D8%AA%D8%B4-%D8%A8%D9%8A-%D9%86%D8%AA%D8%A7%D8%A6%D8%AC-%D9%81%D8%AD%D8%B5-%D8%A8%D9%84%D8%AC%D9%8A%D9%83%D8%A7-24/- `headers.json` f52fb18bccd6bc51882d48a7224a91fee22109c3610c3daad81989c9daf58752 1,121 bytes
- `page.html` eec7fcd49506cfcfa40abc7215e69285ac31b4831d4043fb48ca7299212df3a5 185,125 bytes
- `provenance.json` a158cad3caf5fdd0fce48d6949c492457176a740109df100c4ad3a8a5a132ad9 2,033 bytes
- `rendered.html` e49cfa7763656cea5a0cd26045a08042e51bbd3279a5637d12e1c3eaa7063fe2 211,940 bytes
- `screenshot.jpg` b1fcf24ea753f7984f6437caec8f2446f90dab5646b0f750dfeb36a83a3f687f 797,469 bytes
- `text.txt` 1bedfa5d82126bd0ae12ad93e7652e5e947c03600f555d84b5b113c50613a17d 20,414 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.54 · data as of 2026-10-29T17:13Z · vault commit cd9375f1aefd · https://refs.php.oct.2026.newsroom.sgit.ai/sources/belg24-d8-ab-d8-ba-d8-b1-d8-a7-d8-aa-d8-a8-d9-8/index.html