Some weeks, building SwingCircles means getting excited about the things we can do together. Other weeks, it means reading security announcements with a cup of tea going cold beside the keyboard. This week has involved a bit of both. There has been important news about the technology behind many websites, including ours, and I wanted to explain what it means without sending you off to decipher a page of technical jargon. Then we can get to something considerably more enjoyable: Quiz Night is coming soon.

Making sense of the PHP headlines

You may have seen reports about a security problem called PHP2Shell. PHP is part of the software that helps WordPress websites work behind the scenes, turning requests into the pages you see. Two serious weaknesses were disclosed this week, and fixes were released on 21 October. On an affected server, those weaknesses could allow someone to run code without permission. That is why website owners and hosting companies have been urged to take the news seriously. [1]

WordPress published its own announcement on 21 October, advising site owners to check with their hosting provider and ensure PHP is patched promptly. It also explained that these issues need to be fixed in PHP itself, so a WordPress update is not the solution. For anyone wondering why there isn’t a new button in their dashboard that makes the headlines disappear, that is the reason. The relevant work happens further underneath the website. [2]

What our hosting provider has confirmed

SwingCircles uses Hostinger for its WordPress hosting. Hostinger has confirmed that it installed the PHP fixes across its hosting servers, excluding customer-managed VPS servers, with that rollout completed on 22 October. It has also reported that the protections it introduced cover a related PHP issue announced on 23 October. That is reassuring information from the company responsible for that part of our hosting. It is the confirmation we are relying on for this update. [3]

There is a distinction worth keeping clear here. A hosting provider’s confirmation about a particular issue tells us about that issue; it cannot certify every part of a website forever. Our separate VPS sits outside Hostinger’s managed PHP rollout, and any PHP services running there would need their own check. I want our updates to give you useful information with an honest account of what has been confirmed. There is enough vague reassurance on the internet already, usually accompanied by a stock photograph of a padlock.

The quieter side of building a community

Privacy matters in a community like ours because people should be able to choose what they share and with whom. A profile can represent a very personal part of someone’s life. That makes the less glamorous decisions about software, access and maintenance part of the experience too. They deserve attention even when they will never make an exciting screenshot. I would much rather be able to explain a specific protection than expect anyone to feel reassured by a shiny badge.

This is also why I want these Behind the Scenes updates to include the practical stuff alongside the more enjoyable announcements. If a major security story raises questions, you should be able to find a clear explanation here. However, I am equally conscious that nobody joined a community hoping for a weekly lecture about server maintenance. You have better things to do, and I would quite like to get back to building some of them.

The work behind the scenes should make it easier to enjoy the company in front of you.

Quiz Night is coming soon

Which brings us neatly to Quiz Night. Getting this working is the next thing I want to focus on, and I am looking forward to giving the Quiz Night Lounge a proper reason to earn its name. The idea is a shared evening where members can turn up, have a go and get talking around something everyone can join in with. A question gives you an easy opening, whether you know the answer or are about to be magnificently wrong. Both tend to produce a conversation.

There is something lovely about discovering someone’s sense of humour before you have worked out what to say to them. You might find the person with an alarming knowledge of eighties television, or the one who confidently insists that a completely invented answer is definitely correct. Meanwhile, somebody who has been quietly browsing might spot their favourite subject and suddenly have plenty to contribute. That is the atmosphere I would like us to create: relaxed, welcoming and with room for a little friendly competitiveness.

A shared evening to look forward to

Quiz Night is still coming together, so the first session and the finer details are to be confirmed. I will share those when they are ready, rather than announce an evening and discover the quizmaster has wandered off into a technical cupboard. For now, I wanted you to know where the next bit of attention is going. It feels like a positive step towards making SwingCircles somewhere people enjoy spending time, with familiar names and conversations that carry on after the questions have finished.

As the community grows, those small shared moments are what I am looking forward to most. A running joke, a surprising answer or a bit of good-natured rivalry can make the next hello feel easier. That is a lovely thing to build towards after a week of security headlines. Get your thinking caps ready, and perhaps have a convincing explanation prepared for why you absolutely knew that answer before anyone else said it.

A question to leave you with

Which subject would make you quietly confident at Quiz Night, and which one would have you reaching for a tactical biscuit? If you fancy sharing, tell us what you would enjoy seeing in the questions. There is no homework attached; curiosity and a willingness to have a laugh will do nicely. I suspect we are going to learn some wonderfully unexpected things about one another.

Private. Verified. Chaos-Free.

Source links for the article

[1] PHP official security advisories
https://www.php.net/archive/2026.php

[2] WordPress official announcement of 21 October 2026
https://wordpress.org/news/2026/10/critical-php-security-release/

[3] Hostinger statement updated 23 October 2026
https://www.hostinger.com/blog/protecting-php2shell/

Don’t forget to vote for this article to win ‘Best in Category’ at the annual ‘Circles Awards’ here:

Explore more in this series: Behind the Scenes