danielstgt

#!/usr/bin/env bash
#
# php2shell-triage.sh
# Read-only triage for PHP2Shell (CVE-2026-109618 / CVE-2026-109619).
# It checks whether your PHP build was in the vulnerable range and looks for
# the few signals an exploitation attempt tends to leave behind.
#
# It never changes anything on the system. It only reads logs and lists files.
# Run as root (or via sudo) so it can read FPM and auth logs:
#   sudo bash php2shell-triage.sh [WEBROOT...]

danielstgt

Upgrade ImageMagick Version to 7 with the Imagick PHP extension

Tested on Laravel Forge provisioned server with Ubuntu 22, PHP 8.3 and 8.4

Check the output of the current version, if it's already on v7 then you're done

php -r 'print_r(Imagick::getVersion());'
php8.3 -r 'print_r(Imagick::getVersion());'
php8.4 -r 'print_r(Imagick::getVersion());'

danielstgt

setopt extended_glob

for img in *.(#i)(jpg|jpeg|png)
do
  if [ -f "$img" ]; then
    name="${img%.*}"

    if magick "$img" -strip -quality 60 -define heic:avif-speed=0 -define heic:subsample=420 "${name}.avif"
    then
      echo "🌇 Converted: $img -> ${name}.avif"

danielstgt

Migration Guide

1) Get the webhook URL for your channel on Discord

Click on the channel settings icon and select integrations.

2) Create a new entry in your .env

LOG_DISCORD_WEBHOOK_URL=<insert-the-webhook-url-here>

danielstgt

bun install --frozen-lockfile && bun run build

danielstgt

Proxy settings for the umami installation

    location / {
        proxy_pass http://127.0.0.1:3000;

        proxy_read_timeout     120;
        proxy_connect_timeout  40;
        proxy_redirect         off;

danielstgt

<template>
    <svg>
        <use :href="symbolId" />
    </svg>
</template>

<script>
export default {
    props: ['icon'],

danielstgt

<template>
    <svg v-bind="svgAttributes" v-html="svgContent"></svg>
</template>

<script>
export default {
    props: ['icon'],

    data() {
        return {

danielstgt

<template>
    <svg
        v-bind="svgAttributes"
        v-html="svgContent"
    >
    </svg>
</template>

<script>
export default {

danielstgt

@layer utilities {
    .pb-safe {
        padding-bottom: env(safe-area-inset-bottom);
    }
}