{"id":9187,"date":"2026-10-22T21:12:50","date_gmt":"2026-10-22T18:12:50","guid":{"rendered":"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/"},"modified":"2026-10-22T21:31:42","modified_gmt":"2026-10-22T18:31:42","slug":"php2shell-nedir","status":"publish","type":"post","link":"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/","title":{"rendered":"php2shell Nedir? PHP&#8217;deki Kritik G\u00fcvenlik A\u00e7\u0131klar\u0131na Kar\u015f\u0131 Ne Yapmal\u0131s\u0131n\u0131z?"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Yaz\u0131 \u0130\u00e7eri\u011fi<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #0a0a0a;color:#0a0a0a\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #0a0a0a;color:#0a0a0a\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#CVE-2026-109618_Bellek_Yetersizliginde_Bozulan_Veri\" >CVE-2026-109618: Bellek Yetersizli\u011finde Bozulan Veri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#CVE-2026-109619_Temizlenmeyen_Eski_Durum_Bilgisi\" >CVE-2026-109619: Temizlenmeyen Eski Durum Bilgisi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#Dosya_Yukleme_Ilerlemesi_Ozelligini_Kapatin\" >Dosya Y\u00fckleme \u0130lerlemesi \u00d6zelli\u011fini Kapat\u0131n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#PHP_85_Kullaniyorsaniz\" >PHP 8.5 Kullan\u0131yorsan\u0131z<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#Istek_Boyutunu_Sinirlayin\" >\u0130stek Boyutunu S\u0131n\u0131rlay\u0131n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/php2shell-nedir\/#Sizin_Yapmaniz_Gereken_Bir_Sey_Var_mi\" >Sizin Yapman\u0131z Gereken Bir \u015eey Var m\u0131?<\/a><\/li><\/ul><\/nav><\/div>\n\n<p class=\"wp-block-paragraph\">PHP, bug\u00fcn internetteki web sitelerinin b\u00fcy\u00fck b\u00f6l\u00fcm\u00fcn\u00fcn arkas\u0131nda \u00e7al\u0131\u015fan programlama dilidir. WordPress, WooCommerce, Laravel ve pek \u00e7ok \u00f6zel yaz\u0131l\u0131m PHP ile \u00e7al\u0131\u015f\u0131r. Bu nedenle PHP&#8217;nin kendisinde bulunan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tek bir uygulamay\u0131 de\u011fil, ayn\u0131 sunucudaki b\u00fct\u00fcn siteleri ilgilendirebilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PHP g\u00fcvenlik ekibi 20 Ekim 2026&#8217;da kritik bir g\u00fcvenlik g\u00fcncellemesinin gelece\u011fini duyurdu ve 21 Ekim 2026&#8217;da iki ciddi a\u00e7\u0131\u011f\u0131 kapatan yeni s\u00fcr\u00fcmleri yay\u0131mlad\u0131. G\u00fcvenlik toplulu\u011funda <strong>php2shell<\/strong> ad\u0131yla an\u0131lan bu a\u00e7\u0131klar, kimlik do\u011frulamas\u0131 gerektirmeden sunucuda uzaktan kod \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131na imk\u00e2n tan\u0131yabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Peki php2shell nedir, hangi PHP kurulumlar\u0131n\u0131 etkiler ve web sitenizi korumak i\u00e7in neler yapmal\u0131s\u0131n\u0131z?<\/p>\n\n\n<figure class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"502\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/php2shell-nedir-kapak.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"php2shell Nedir\" style=\"object-fit:cover;\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/php2shell-nedir-kapak.png 1200w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/php2shell-nedir-kapak-300x126.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/php2shell-nedir-kapak-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/php2shell-nedir-kapak-990x414.png 990w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n<h2 class=\"wp-block-heading\">php2shell Nedir?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">php2shell, PHP&#8217;de bulunan iki g\u00fcvenlik a\u00e7\u0131\u011f\u0131na verilen ortak add\u0131r: <strong>CVE-2026-109618<\/strong> ve <strong>CVE-2026-109619<\/strong>. PHP g\u00fcvenlik ekibi iki a\u00e7\u0131\u011f\u0131 da CVSS v4.0 \u00f6l\u00e7e\u011finde <strong>9.2<\/strong> puanla kritik seviyede de\u011ferlendiriyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ad\u0131ndaki &#8220;shell&#8221; ifadesi, a\u00e7\u0131ktan yararlanan bir sald\u0131rgan\u0131n sunucuda komut \u00e7al\u0131\u015ft\u0131rabilmesine i\u015faret eder. Uzaktan kod \u00e7al\u0131\u015ft\u0131rma (RCE) olarak bilinen bu durumda sald\u0131rgan dosyalar\u0131 de\u011fi\u015ftirebilir, zararl\u0131 yaz\u0131l\u0131m yerle\u015ftirebilir ya da sunucuyu ba\u015fka sald\u0131r\u0131lar i\u00e7in kullanabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu a\u00e7\u0131klar\u0131 pek \u00e7ok g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan ay\u0131ran nokta, uygulaman\u0131n kendi kodundan de\u011fil PHP&#8217;nin istekleri i\u015fleme bi\u00e7iminden kaynaklanmas\u0131d\u0131r. Yani WordPress, eklentiler ve tema g\u00fcncel olsa bile sunucudaki PHP g\u00fcncellenmedi\u011fi s\u00fcrece risk devam eder.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">CVE-2026-109618 ve CVE-2026-109619 Ne Anlama Geliyor?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Her iki a\u00e7\u0131k da PHP&#8217;nin bellekte tuttu\u011fu verilerle ilgilidir ancak farkl\u0131 durumlarda ortaya \u00e7\u0131kar.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"CVE-2026-109618_Bellek_Yetersizliginde_Bozulan_Veri\"><\/span>CVE-2026-109618: Bellek Yetersizli\u011finde Bozulan Veri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PHP bir iste\u011fi i\u015flerken bellek yetersizli\u011fiyle (out of memory) kar\u015f\u0131la\u015f\u0131rsa, iste\u011fe ait baz\u0131 i\u00e7 veriler hen\u00fcz tam haz\u0131rlanmam\u0131\u015fken \u00e7al\u0131\u015fma kesilebilir. \u0130stek sonunda yap\u0131lan temizlik i\u015flemi bu yar\u0131m kalm\u0131\u015f veriyi ge\u00e7erli kabul edebilir. Sald\u0131rgan bu durumu bilerek tetikledi\u011finde ortaya \u00e7\u0131kan bellek bozulmas\u0131 uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya kadar uzanabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"CVE-2026-109619_Temizlenmeyen_Eski_Durum_Bilgisi\"><\/span>CVE-2026-109619: Temizlenmeyen Eski Durum Bilgisi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PHP-FPM gibi yap\u0131larda ayn\u0131 PHP i\u015f\u00e7isi art arda bir\u00e7ok iste\u011fi kar\u015f\u0131lar. Bu a\u00e7\u0131kta bir iste\u011fe ait i\u00e7 durum bilgisi, kulland\u0131\u011f\u0131 bellek serbest b\u0131rak\u0131ld\u0131ktan sonra da kalabiliyor. Ayn\u0131 i\u015f\u00e7inin kar\u015f\u0131lad\u0131\u011f\u0131 bir sonraki istek, bu bilgi s\u0131f\u0131rlanmadan \u00f6nce eski veriyi kullanabiliyor. PHP ekibine g\u00f6re a\u00e7\u0131\u011f\u0131n do\u011frulanm\u0131\u015f yollar\u0131ndan biri, oturum (session) eklentisinin dosya y\u00fckleme ilerlemesi \u00f6zelli\u011finden ge\u00e7iyor.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Hangi PHP Kurulumlar\u0131 Risk Alt\u0131nda?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">PHP g\u00fcvenlik ekibinin duyurusuna g\u00f6re web isteklerine yan\u0131t veren b\u00fct\u00fcn PHP kurulumlar\u0131 risk alt\u0131ndad\u0131r. PHP-FPM, Apache mod_php, php-cgi, FrankenPHP ve LiteSpeed ile \u00e7al\u0131\u015fan kurulumlar bu kapsamdad\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ekip en y\u00fcksek riskin mod_php kullanan sunucularda oldu\u011funu belirtiyor. Bu yap\u0131da kimlik do\u011frulamas\u0131 olmayan tek bir iste\u011fin, uygulama kodu hi\u00e7 \u00e7al\u0131\u015fmadan sald\u0131r\u0131y\u0131 ba\u015flatabildi\u011fi g\u00f6sterilmi\u015f durumda.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Payla\u015f\u0131ml\u0131 hosting, bulut sunucu ya da fiziksel sunucu fark etmeksizin, internete a\u00e7\u0131k bir PHP uygulamas\u0131 \u00e7al\u0131\u015ft\u0131ran her ortam bu a\u00e7\u0131klar\u0131 dikkate almal\u0131d\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">G\u00fcvenlik G\u00fcncellemesi Hangi PHP S\u00fcr\u00fcmlerinde Var?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A\u00e7\u0131klar\u0131 kapatan resm\u00ee PHP s\u00fcr\u00fcmleri \u015funlard\u0131r:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>PHP 8.5.12<\/strong><\/li>\n\n\n\n<li><strong>PHP 8.4.27<\/strong><\/li>\n\n\n\n<li><strong>PHP 8.3.36<\/strong><\/li>\n\n\n\n<li><strong>PHP 8.2.35<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">PHP 8.1 ve daha eski s\u00fcr\u00fcmler art\u0131k PHP projesinden g\u00fcncelleme alm\u0131yor. Ancak a\u00e7\u0131klar\u0131n ciddiyeti nedeniyle PHP g\u00fcvenlik ekibi PHP 7.4, 8.0 ve 8.1 i\u00e7in kaynak kod d\u00fczeyinde asgari d\u00fczeltmeler payla\u015ft\u0131. Baz\u0131 i\u015fletim sistemi da\u011f\u0131t\u0131mlar\u0131 ve uzun s\u00fcreli destek sa\u011flayan firmalar da eski s\u00fcr\u00fcmler i\u00e7in d\u00fczeltilmi\u015f paketler sunuyor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Burada dikkat edilmesi gereken bir nokta var: Eski s\u00fcr\u00fcmlere ta\u015f\u0131nan d\u00fczeltmelerde PHP&#8217;nin s\u00fcr\u00fcm numaras\u0131 \u00e7o\u011fu zaman de\u011fi\u015fmez. \u00d6rne\u011fin PHP 7.4.33, d\u00fczeltmeyi ald\u0131ktan sonra da 7.4.33 olarak g\u00f6r\u00fcnebilir. Eski bir s\u00fcr\u00fcm kullan\u0131yorsan\u0131z g\u00fcvenlik g\u00fcncellemesinin kurulup kurulmad\u0131\u011f\u0131n\u0131 hizmet sa\u011flay\u0131c\u0131n\u0131za sorman\u0131z en do\u011fru yoldur.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ayr\u0131ca PHP 8.2&#8217;nin g\u00fcvenlik deste\u011fi 31 Aral\u0131k 2026&#8217;da sona erecek. PHP 8.2 ve daha eski s\u00fcr\u00fcmleri kullanan projelerin g\u00fcncel bir s\u00fcr\u00fcme ge\u00e7i\u015fi planlamas\u0131 \u00f6nerilir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sitenizin PHP S\u00fcr\u00fcm\u00fcn\u00fc Nas\u0131l Kontrol Edebilirsiniz?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sitenizin hangi PHP s\u00fcr\u00fcm\u00fcyle \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 hosting kontrol panelinizden \u00f6\u011frenebilirsiniz. cPanel&#8217;de <strong>MultiPHP Y\u00f6neticisi<\/strong> ya da PHP s\u00fcr\u00fcm\u00fc se\u00e7me ekran\u0131, Plesk&#8217;te ise alan ad\u0131n\u0131n <strong>PHP Ayarlar\u0131<\/strong> b\u00f6l\u00fcm\u00fc bu bilgiyi g\u00f6sterir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sunucuya SSH ile eri\u015fiminiz varsa a\u015fa\u011f\u0131daki komut, komut sat\u0131r\u0131ndaki PHP s\u00fcr\u00fcm\u00fcn\u00fc g\u00f6sterir:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">php -v<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Komut sat\u0131r\u0131ndaki PHP ile sitenin kulland\u0131\u011f\u0131 PHP farkl\u0131 olabilir. Sunucuda birden fazla PHP s\u00fcr\u00fcm\u00fc kuruluysa her birinin ayr\u0131 ayr\u0131 g\u00fcncellenmesi gerekir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Hemen G\u00fcncelleyemiyorsan\u0131z Hangi \u00d6nlemler Al\u0131nabilir?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kal\u0131c\u0131 \u00e7\u00f6z\u00fcm PHP&#8217;yi d\u00fczeltilmi\u015f bir s\u00fcr\u00fcme y\u00fckseltmektir. G\u00fcncellemeyi hemen yapam\u0131yorsan\u0131z PHP ekibinin \u00f6nerdi\u011fi ge\u00e7ici \u00f6nlemler baz\u0131 sald\u0131r\u0131 yollar\u0131n\u0131 kapat\u0131r, ancak kurulumu tamamen g\u00fcvenli h\u00e2le getirmez.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Dosya_Yukleme_Ilerlemesi_Ozelligini_Kapatin\"><\/span>Dosya Y\u00fckleme \u0130lerlemesi \u00d6zelli\u011fini Kapat\u0131n<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CVE-2026-109619&#8217;un do\u011frulanm\u0131\u015f yollar\u0131n\u0131 kapatmak i\u00e7in <code>php.ini<\/code> dosyas\u0131na ya da PHP-FPM havuz ayarlar\u0131na a\u015fa\u011f\u0131daki sat\u0131r eklenir ve b\u00fct\u00fcn PHP i\u015f\u00e7ileri yeniden ba\u015flat\u0131l\u0131r:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">session.upload_progress.enabled = 0<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Bu ayar <code>ini_set()<\/code> ya da <code>.user.ini<\/code> dosyas\u0131yla verildi\u011finde i\u015fe yaramaz; iste\u011fin i\u015flenmesinden \u00f6nce okunan bir yap\u0131land\u0131rmada yer almal\u0131d\u0131r. \u00d6zellik, dosya y\u00fcklerken ilerleme durumunu g\u00f6steren uygulamalar taraf\u0131ndan kullan\u0131l\u0131r. Kapatmadan \u00f6nce sitenizde b\u00f6yle bir \u00f6zellik olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"PHP_85_Kullaniyorsaniz\"><\/span>PHP 8.5 Kullan\u0131yorsan\u0131z<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">PHP 8.5&#8217;te ek olarak <code>fatal_error_backtraces = 0<\/code> ayar\u0131 verilir ve i\u015f\u00e7iler yeniden ba\u015flat\u0131l\u0131r. Bu ayar, \u00f6l\u00fcmc\u00fcl hata (fatal error) \u00fczerinden do\u011frulanm\u0131\u015f sald\u0131r\u0131 yolunu kapat\u0131r.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Istek_Boyutunu_Sinirlayin\"><\/span>\u0130stek Boyutunu S\u0131n\u0131rlay\u0131n<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">CVE-2026-109618 i\u00e7in PHP ekibi, dosya y\u00fckleme gerekmeyen uygulamalarda <code>post_max_size<\/code> de\u011ferinin 8M, dosya y\u00fcklenen uygulamalarda 32M ile s\u0131n\u0131rlanmas\u0131n\u0131 \u00f6neriyor. <code>upload_max_filesize<\/code> de\u011feri bunun alt\u0131nda tutulmal\u0131d\u0131r. Ekip ayr\u0131ca bellek s\u0131n\u0131r\u0131 ve kapsay\u0131c\u0131 (container) s\u0131n\u0131rlar\u0131 i\u00e7in ek \u00f6neriler sunuyor; bu ayarlar sunucunun tamam\u0131n\u0131 etkiledi\u011fi i\u00e7in uygulanmadan \u00f6nce dikkatle de\u011ferlendirilmelidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Unutmay\u0131n: Bu \u00f6nlemler yaln\u0131zca g\u00fcncelleme yap\u0131lana kadar riski azalt\u0131r. Kal\u0131c\u0131 koruma i\u00e7in PHP&#8217;nin g\u00fcncellenmesi gerekir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Domainhizmetleri Olarak Neler Yapt\u0131k?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A\u00e7\u0131klar duyuruldu\u011fu andan itibaren altyap\u0131m\u0131zdaki PHP kurulumlar\u0131n\u0131 takip ettik ve \u015fu ad\u0131mlar\u0131 uygulad\u0131k:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Resm\u00ee g\u00fcncelleme yay\u0131mlanmadan \u00f6nce, 21 Ekim sabah\u0131 payla\u015f\u0131ml\u0131 hosting sunucular\u0131m\u0131zda ge\u00e7ici koruma ayar\u0131n\u0131 devreye ald\u0131k.<\/li>\n\n\n\n<li>Payla\u015f\u0131ml\u0131 Web Hosting (cPanel) sunucular\u0131m\u0131z\u0131n tamam\u0131nda PHP 5.4&#8217;ten 8.5&#8217;e kadar b\u00fct\u00fcn s\u00fcr\u00fcmlerin g\u00fcvenlik g\u00fcncellemeleri 22 Ekim sabah\u0131 tamamland\u0131. Ge\u00e7ici koruma ayar\u0131, g\u00fcncellemesi kurulan s\u00fcr\u00fcmlerden kald\u0131r\u0131ld\u0131.<\/li>\n\n\n\n<li>Plesk kullanan sunucular i\u00e7in, deste\u011fi sona ermi\u015f PHP s\u00fcr\u00fcmlerine de d\u00fczeltilmi\u015f paket kuran bir kurulum beti\u011fi haz\u0131rlad\u0131k. Betik PHP 5.6 d\u00e2hil eski s\u00fcr\u00fcmleri ve CentOS 7 gibi art\u0131k g\u00fcncelleme almayan i\u015fletim sistemlerini de destekliyor.<\/li>\n\n\n\n<li>Bu g\u00fcncellemeyi t\u00fcm Domainhizmetleri Bulut Sunucu (VDS) hizmetlerinde \u00fccretsiz yap\u0131yoruz.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sizin_Yapmaniz_Gereken_Bir_Sey_Var_mi\"><\/span>Sizin Yapman\u0131z Gereken Bir \u015eey Var m\u0131?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>cPanel tabanl\u0131 Payla\u015f\u0131ml\u0131 Web Hosting paketlerimizden birini kullan\u0131yorsan\u0131z:<\/strong> G\u00fcncellemeler bizim taraf\u0131m\u0131zda yap\u0131ld\u0131, ek bir i\u015flem yapman\u0131za gerek yok.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Domainhizmetleri Bulut Sunucu kullan\u0131yorsan\u0131z:<\/strong> Destek Merkezi&#8217;nden talep olu\u015fturman\u0131z yeterli. Ekibimiz sunucunuzdaki PHP s\u00fcr\u00fcmlerini kontrol eder ve g\u00fcncellemeyi \u00fccretsiz yapar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kendi y\u00f6netti\u011finiz ba\u015fka bir sunucunuz varsa:<\/strong> PHP s\u00fcr\u00fcmlerini yukar\u0131daki ad\u0131mlarla kontrol edin ve g\u00fcncellemeyi geciktirmeyin.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sonu\u00e7<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">php2shell olarak an\u0131lan CVE-2026-109618 ve CVE-2026-109619, PHP&#8217;nin istekleri i\u015fleme s\u00fcrecindeki hatalardan kaynaklanan ve kimlik do\u011frulamas\u0131 gerektirmeden uzaktan kod \u00e7al\u0131\u015ft\u0131rmaya imk\u00e2n tan\u0131yabilen kritik a\u00e7\u0131klard\u0131r. Uygulaman\u0131z\u0131n g\u00fcncel olmas\u0131 bu a\u00e7\u0131klara kar\u015f\u0131 tek ba\u015f\u0131na yeterli de\u011fildir; as\u0131l \u00e7\u00f6z\u00fcm PHP&#8217;nin d\u00fczeltilmi\u015f bir s\u00fcr\u00fcme y\u00fckseltilmesidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00fcncellemeyi hemen yapamad\u0131\u011f\u0131n\u0131z durumlarda ge\u00e7ici \u00f6nlemler riski azalt\u0131r, ancak kal\u0131c\u0131 koruma sa\u011flamaz. Eski PHP s\u00fcr\u00fcmlerini kullanan projelerin desteklenen bir s\u00fcr\u00fcme ge\u00e7i\u015fi planlamas\u0131 da uzun vadede en g\u00fcvenli yoldur.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.domainhizmetleri.com\/limitsiz-hosting\/\" target=\"_blank\" rel=\" noreferrer noopener\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"290\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1024x290.png\" alt=\"\" class=\"wp-image-8461\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1024x290.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-300x85.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1536x435.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-scaled.png 2048w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-990x280.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1320x374.png 1320w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Domainhizmetleri olarak g\u00fcncel ve g\u00fcvenli altyap\u0131m\u0131zla web projelerinize uygun hosting ve sunucu \u00e7\u00f6z\u00fcmleri sunuyoruz. Sorular\u0131n\u0131z i\u00e7in <a href=\"https:\/\/www.domainhizmetleri.com\/panel\/submitticket.php\">Destek Merkezi<\/a>&#8216;nden talep olu\u015fturabilir ya da mesai saatleri i\u00e7erisinde 0 850 885 2552 numaral\u0131 hatt\u0131m\u0131z\u0131 arayabilirsiniz.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>PHP, bug\u00fcn internetteki web sitelerinin b\u00fcy\u00fck b\u00f6l\u00fcm\u00fcn\u00fcn arkas\u0131nda \u00e7al\u0131\u015fan programlama dilidir. WordPress, WooCommerce, Laravel ve pek \u00e7ok \u00f6zel yaz\u0131l\u0131m PHP ile \u00e7al\u0131\u015f\u0131r. Bu nedenle PHP&#8217;nin kendisinde bulunan bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tek bir uygulamay\u0131 de\u011fil, ayn\u0131 sunucudaki b\u00fct\u00fcn siteleri ilgilendirebilir. PHP g\u00fcvenlik ekibi 20 Ekim 2026&#8217;da kritik bir g\u00fcvenlik g\u00fcncellemesinin gelece\u011fini duyurdu ve 21 Ekim 2026&#8217;da [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9188,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[145,147],"tags":[52,18,321],"class_list":["post-9187","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nedir-nasil","category-sunucu","tag-guvenlik","tag-php","tag-php2shell"],"views":0,"_links":{"self":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/comments?post=9187"}],"version-history":[{"count":1,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9187\/revisions"}],"predecessor-version":[{"id":9189,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9187\/revisions\/9189"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/media\/9188"}],"wp:attachment":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/media?parent=9187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/categories?post=9187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/tags?post=9187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}