Articles on design, web development, performance and digital strategy from the 3bit team.
Announced on 20 October 2026 and fixed the next day, two critical PHP vulnerabilities let an attacker run code on a web server without any credentials. What happened, who is exposed and what to do.
We use cookies the site needs to work and, with your consent, analytics cookies to understand how it is used and external content such as Google Maps. You can accept all, reject all, or choose which ones to allow.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| csrftoken | 3bit.it | Protects forms against forged submissions. | 1 year |
| sessionid | 3bit.it | Keeps the session of signed-in administrators. | session |
| 3bit_cookie_consent | 3bit.it | Remembers your cookie choices. | persistent (local storage) |
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _pk_id.* | 3bit.it (Matomo) | Stores an anonymous visitor ID, to recognise returning visits. | 13 months |
| _pk_ses.* | 3bit.it (Matomo) | Temporarily stores data for the current visit. | 30 minutes |
| _pk_ref.* | 3bit.it (Matomo) | Remembers which site referred you here. | 6 months |
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| NID | Google (Google Maps) | Remembers preferences such as language; can be used to show ads to people not signed in to Google. | 6 months from last use |
| __Secure-ENID | Google (Google Maps) | Remembers preferences; used instead of NID depending on the cookie choices made on Google. | 13 months |
| AEC | Google (Google Maps) | Detects spam, fraud and abuse. | 6 months |
| SOCS | Google (Google Maps) | Stores the cookie choices made on Google services. | 13 months |