Still confused about how all this is being handled TBH. Why would you say "there is a huge vulnerability in PHP" before any patch or workaround (except for taking down the whole site) is available? Are you trying to make people take down their PHP sites?