You may have seen the news this morning about a cyber incident affecting websites built on PHP, the technology behind a large share of the web. Study Dog’s platform is built on PHP, so we want to tell you straight away where we stand.
Study Dog has not been affected, and we have no evidence that any customer data has been accessed.
What we know
Our web hosting provider has tested the vulnerability against its live servers. It found that the attack cannot be used to take over sites hosted on its platform, ours included. It gave three reasons:
- Our hosting runs on LiteSpeed, which handles requests differently from what the attack relies on, so the malicious trigger never fires.
- On the host’s newer platform, the vulnerable PHP feature is switched off.
- Our website runs under its own isolated server, so even a successful attack couldn’t reach Study Dog’s platform.
PHP has since released a security fix. Although our platform wasn’t affected, the fix was applied yesterday.
What this means for you
- You don’t need to do anything. There is no need to change your password or take any other action.
- Study Dog will keep working as normal. If you notice anything odd while using the platform, please tell us.
- We are monitoring the situation and will update this post if anything changes.
Questions? Email us at hello@studydog.co.uk and we’ll get back to you promptly.
Leo Carr
Founder, Study Dog
