PHP2Shell checks, queues, webhooks, and new work

Security notes, backend architecture posts, anonymised case studies, and new n8n templates.

Oct 28, 2026 · 2 min read

PHP2Shell checks, queues, webhooks, and new work

This edition is mostly about backend edges: how work moves between systems, how repeated deliveries stay safe, how APIs get tested, and how to respond when a PHP vulnerability needs attention. We also published four anonymised work pages and a set of n8n templates by Rahul Joshi on n8n.io.

Lead story: checking and protecting PHP sites

We published PHP2Shell: how to check and protect your PHP site, covering PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619. The post is about the practical response: check your PHP version, patch it where possible, or shield it with a WAF when patching is not immediate.

The useful part of this kind of incident work is reducing ambiguity. Teams need to know which PHP versions are in use, which hosts are exposed, and whether the current mitigation is a patch or a protective control in front of the application. The post keeps the focus on those checks rather than on general vulnerability commentary.

It also includes two real cases. The point is not that every PHP estate looks the same, but that the response pattern should be concrete: identify exposure, decide on patching or shielding, and avoid leaving the system in a half-known state.

In brief

Message queues vs event streams: SQS, RabbitMQ, Kafka explains when to use SQS or RabbitMQ for work distribution, and when Kafka fits better because you need retained event logs, replay, fan-out, and per-key ordering.

Webhook retries and idempotency keys, together covers why webhook retries need stable idempotency keys so repeated deliveries are safe, deduplicated, observable, and recoverable through DLQs.

API testing explained: types, what to automate, and tools looks at API testing below the UI, including the five main types, how mocking and test data fit in, and which tests to automate first.

Automating mortgage back-office work with n8n describes a staged n8n workflow for mortgage back offices, covering intake, classification, extraction and validation, exception routing to people, and a full audit trail.

A Multi-Specialty Clinical Practice & Outpatient Network: AI-assisted clinical documentation and electronic medical records platform streamlining provider charting, encounter notes, and prescription workflows.

A Natural Language Processing & Content Technology Platform: An AI text humanization and natural language stylistic refinement platform transforming synthetic outputs into authentic human-like prose.

A K-12 EdTech & Institutional School District Platform: AI-driven school library management platform providing access control, personalized reading recommendations, book challenge tracking, and library catalog analysis (LCA).

A Regional Family Entertainment & Arcade Center Group: A centralized cloud-based arcade management and amusement center platform resolving operational fragmentation across games, POS, and player cards.