{"id":1581,"date":"2026-10-22T12:48:26","date_gmt":"2026-10-22T12:48:26","guid":{"rendered":"https:\/\/sense.hr\/blog\/?p=1581"},"modified":"2026-10-22T12:48:26","modified_gmt":"2026-10-22T12:48:26","slug":"php2shell-security-update","status":"publish","type":"post","link":"https:\/\/sense.hr\/blog\/php2shell-security-update\/","title":{"rendered":"An update on the PHP2Shell security issue"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">You may already have heard about PHP2Shell, a security issue announced on 21 October 2026 that affects websites around the world. It involves PHP, a widely used piece of software that runs around three-quarters of the world\u2019s websites. In summary, security experts found two weaknesses in PHP that could theoretically let criminals take control of a website without needing a password.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We want you to know that no Sense products have been affected by this security issue. The software our customers use does not use PHP, so customer accounts have not been at risk due to PHP2Shell, at any point.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, our marketing websites do use PHP. These are the websites we use to tell people about our products and services, and they can be found here: <a href=\"http:\/\/sense.hr\">sense.hr<\/a>, <a href=\"http:\/\/senseworkplace.com\">senseworkplace.com<\/a>, and <a href=\"http:\/\/sense.tech\">sense.tech<\/a>. And although these websites have no impact on the software our customers use, we wanted to let you know what we have done to keep them safe all the same.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What we did<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>21 October:<\/strong> On the day the issue was announced, we updated our marketing websites to the newest version of PHP available and tightened their security settings. This made an attack harder while we waited for the full fix.<\/li>\n\n\n\n<li><strong>22 October:<\/strong> As soon as our hosting provider released the full fix, we installed it on all three websites, which closed both weaknesses. We backed up the websites first, and afterwards we checked that everything was working as normal.<\/li>\n\n\n\n<li><strong>Checking for a break-in:<\/strong> Attacks were seen around the world from 17 October, a few days before the issue was announced. We checked our websites\u2019 records from that date onwards, and found no signs of a break-in.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">All our marketing websites are now protected against this threat, and our checks have confirmed that nothing on our websites was affected.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Do I need to do anything?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Customers of Sense do not need to do anything. Our products and services have worked as normal throughout, and were never affected by this issue in the first place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you have any questions about this, please direct your questions to <a href=\"mailto:security@sense.hr\">security@sense.hr<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PHP2Shell is a security issue affecting websites worldwide. Sense products were never affected, and customers don&#8217;t need to do anything. Here&#8217;s what we did to protect our marketing websites.<\/p>\n","protected":false},"author":2,"featured_media":1583,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1581","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hr-tech"],"contentshake_article_id":"","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PHP2Shell security update: Sense customers not affected<\/title>\n<meta name=\"description\" content=\"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here&#039;s how we protected our marketing websites. No action needed.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sense.hr\/blog\/php2shell-security-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP2Shell security update: Sense customers not affected\" \/>\n<meta property=\"og:description\" content=\"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here&#039;s how we protected our marketing websites. No action needed.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sense.hr\/blog\/php2shell-security-update\/\" \/>\n<meta property=\"og:site_name\" content=\"Sense HR\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-22T12:48:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"John Crowley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"John Crowley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/\"},\"author\":{\"name\":\"John Crowley\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#\\\/schema\\\/person\\\/19dfa01d54d07cc061565194605b7b6f\"},\"headline\":\"An update on the PHP2Shell security issue\",\"datePublished\":\"2026-10-22T12:48:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/\"},\"wordCount\":359,\"publisher\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-security-update.png\",\"articleSection\":[\"HR Tech\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/\",\"name\":\"PHP2Shell security update: Sense customers not affected\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-security-update.png\",\"datePublished\":\"2026-10-22T12:48:26+00:00\",\"description\":\"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here's how we protected our marketing websites. No action needed.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-security-update.png\",\"contentUrl\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/php2shell-security-update.png\",\"width\":1200,\"height\":630,\"caption\":\"Security update: PHP2Shell \u2014 our customers are not affected\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/php2shell-security-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sense.hr\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"An update on the PHP2Shell security issue\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/\",\"name\":\"Sense HR\",\"description\":\"HR insights, guides and news from the Sense HR team.\",\"publisher\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sense.hr\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#organization\",\"name\":\"SenseHR\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Screenshot-2026-10-09-at-16.16.30.png\",\"contentUrl\":\"https:\\\/\\\/sense.hr\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Screenshot-2026-10-09-at-16.16.30.png\",\"width\":1112,\"height\":836,\"caption\":\"SenseHR\"},\"image\":{\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sense.hr\\\/blog\\\/#\\\/schema\\\/person\\\/19dfa01d54d07cc061565194605b7b6f\",\"name\":\"John Crowley\",\"url\":\"https:\\\/\\\/sense.hr\\\/blog\\\/author\\\/john-crowley\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PHP2Shell security update: Sense customers not affected","description":"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here's how we protected our marketing websites. No action needed.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sense.hr\/blog\/php2shell-security-update\/","og_locale":"en_US","og_type":"article","og_title":"PHP2Shell security update: Sense customers not affected","og_description":"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here's how we protected our marketing websites. No action needed.","og_url":"https:\/\/sense.hr\/blog\/php2shell-security-update\/","og_site_name":"Sense HR","article_published_time":"2026-10-22T12:48:26+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png","type":"image\/png"}],"author":"John Crowley","twitter_card":"summary_large_image","twitter_misc":{"Written by":"John Crowley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#article","isPartOf":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/"},"author":{"name":"John Crowley","@id":"https:\/\/sense.hr\/blog\/#\/schema\/person\/19dfa01d54d07cc061565194605b7b6f"},"headline":"An update on the PHP2Shell security issue","datePublished":"2026-10-22T12:48:26+00:00","mainEntityOfPage":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/"},"wordCount":359,"publisher":{"@id":"https:\/\/sense.hr\/blog\/#organization"},"image":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#primaryimage"},"thumbnailUrl":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png","articleSection":["HR Tech"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/","url":"https:\/\/sense.hr\/blog\/php2shell-security-update\/","name":"PHP2Shell security update: Sense customers not affected","isPartOf":{"@id":"https:\/\/sense.hr\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#primaryimage"},"image":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#primaryimage"},"thumbnailUrl":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png","datePublished":"2026-10-22T12:48:26+00:00","description":"PHP2Shell is a worldwide PHP security issue. Sense products were never affected. Here's how we protected our marketing websites. No action needed.","breadcrumb":{"@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sense.hr\/blog\/php2shell-security-update\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#primaryimage","url":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png","contentUrl":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/php2shell-security-update.png","width":1200,"height":630,"caption":"Security update: PHP2Shell \u2014 our customers are not affected"},{"@type":"BreadcrumbList","@id":"https:\/\/sense.hr\/blog\/php2shell-security-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sense.hr\/blog\/"},{"@type":"ListItem","position":2,"name":"An update on the PHP2Shell security issue"}]},{"@type":"WebSite","@id":"https:\/\/sense.hr\/blog\/#website","url":"https:\/\/sense.hr\/blog\/","name":"Sense HR","description":"HR insights, guides and news from the Sense HR team.","publisher":{"@id":"https:\/\/sense.hr\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sense.hr\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/sense.hr\/blog\/#organization","name":"SenseHR","url":"https:\/\/sense.hr\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sense.hr\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/Screenshot-2026-10-09-at-16.16.30.png","contentUrl":"https:\/\/sense.hr\/blog\/wp-content\/uploads\/2026\/10\/Screenshot-2026-10-09-at-16.16.30.png","width":1112,"height":836,"caption":"SenseHR"},"image":{"@id":"https:\/\/sense.hr\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/sense.hr\/blog\/#\/schema\/person\/19dfa01d54d07cc061565194605b7b6f","name":"John Crowley","url":"https:\/\/sense.hr\/blog\/author\/john-crowley\/"}]}},"_links":{"self":[{"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/posts\/1581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/comments?post=1581"}],"version-history":[{"count":2,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/posts\/1581\/revisions"}],"predecessor-version":[{"id":1584,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/posts\/1581\/revisions\/1584"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/media\/1583"}],"wp:attachment":[{"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/media?parent=1581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/categories?post=1581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sense.hr\/blog\/wp-json\/wp\/v2\/tags?post=1581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}