PHP version 8.2.5

We’ve added support for the PHP 8.2 series for our hosting customers, and you can now select it in the My Account control panel.

We always recommend using the most recent PHP version that’s compatible with your scripts (we’re using PHP 8.2 on this blog, for example) — but if you try a new version and you have any problems, you can instantly switch back to the older version. We currently support PHP 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, and 8.2.

Older PHP versions 5.5, 5.6, and 7.0 are still available on the servers, but are no longer supported and can’t be chosen by customers who are already using a newer version. You should update if you’re using one of those (you’ll get nagging email messages from us about it).

As always, don’t hesitate to contact us if you have any trouble.

It’s World Backup Day! How do we protect your data?

Today is World Backup Day! If you’re not backing up your own computer and devices, today’s the perfect day to start doing it; that page has advice.

Do you ever wonder how companies like ours handle backups? It’s a good question. Our customers trust us with lots of data — email, websites, and more. It’s important that we keep that data (and our own data) safe. We do that with a 4-3-2-1 backup policy:

  • There are always at least 4 copies of the data;
  • The data is stored on at least 3 different physical servers;
  • The servers are in at least 2 separate physical locations;
  • At least 1 copy of the data is always physically disconnected from power and the Internet (“air gapped”).
Read the rest of this entry »

PHP version 8.1.17

The PHP developers recently released version 8.1.17 that fixes several bugs. We’ve upgraded the PHP 8.1 series on our servers as a result.

Customers should not notice any changes, but as always, don’t hesitate to contact us if you have any trouble.

PHP versions 8.0.28 and 8.1.16

The PHP developers recently released versions 8.0.28 and 8.1.16 that fix several bugs. We’ve upgraded the PHP 8.0 and PHP 8.1 series on our servers as a result.

Customers should not notice any changes, but as always, don’t hesitate to contact us if you have any trouble.

PHP versions 7.4.33, 8.0.27 and 8.1.14

The PHP developers recently released versions 7.4.33, 8.0.27 and 8.1.14 that fix several bugs. We’ve upgraded the PHP 7.4, PHP 8.0 and PHP 8.1 series on our servers as a result.

Customers should not notice any changes, but as always, don’t hesitate to contact us if you have any trouble.

PHP versions 7.4.32, 8.0.24 and 8.1.11

The PHP developers recently released versions 7.4.32, 8.0.24 and 8.1.11 that fix several bugs. We’ve upgraded the PHP 7.4, PHP 8.0 and PHP 8.1 series on our servers as a result.

Customers should not notice any changes, but as always, don’t hesitate to contact us if you have any trouble.

New status page

We’ve traditionally used our blog for notifications about our system status, but we’ve now added a more modern status page, at www.tigertechstatus.net. It shows any problems, outages, or planned maintenance.

We recommend that you bookmark the page in your web browser so you can check it even if you can’t reach our main site for some reason. (It’s hosted by a third party, so it will be available even if there’s a problem with our services.) You can use the Get Updates button in the top of that page to subscribe to status updates by email, Slack, Microsoft Teams or RSS feeds.

New web-based file manager

We recently added a new web-based file manager interface for our hosting customers. It’s a great alternative to FTP if you need to transfer files.

In addition to the features you’d expect, like uploading, downloading, unzipping, and so on, you can use it to browse individual files in backups we’ve made for your account. (Unlike many other hosting companies nowadays, backups are still always included free with all our hosting plans!)

PHP versions 8.0.23 and 8.1.10

The PHP developers recently released versions 8.0.23 and 8.1.10 that fix several bugs. We’ve upgraded the PHP 8.0 and PHP 8.1 series on our servers as a result.

Customers should not notice any changes, but as always, don’t hesitate to contact us if you have any trouble.

Protection against the BackupBuddy file download bug

The authors of the popular BackupBuddy WordPress plugin recently announced a serious security bug in many versions of their software.

This bug is being exploited by “hackers” who have used it to download the private “wp-config.php” file of many WordPress sites. It’s then possible to use the private information in that file to login to your WordPress dashboard without knowing the password, or to modify your site’s database.

We’ve added firewall rules to block downloads of that file via the bug, but in addition, we’re taking the following steps to protect our customers who were using a vulnerable version of the BackupBuddy plugin at any point between August 26 and September 8:

  1. Changed the backend WordPress database password to a new random one; and
  2. Changed the WordPress “salts” in the wp-config.php file.

These are the steps recommended in the post by the BackupBuddy authors, so our customers don’t need to do this themselves. (The post also suggests an optional third step, but that doesn’t apply to most WordPress sites.)

The only difference affected customers should notice is that WordPress may ask for your normal password again the next time you login, rather than “remembering” you from a previous login.

If you’re using the BackupBuddy plugin on your site, it’s also a good idea to make sure you’re using the latest version of it — in fact, it’s a good idea to turn on automatic updates for all your plugins to minimize the risk of something like this affecting you.

Finally, keep in mind that we already make daily backups of your website at no extra charge. We never want to discourage people from making their own additional backups, but those extra backups are most useful if they’re stored in another location (not just on the same server you’re making a backup of). While investigating this, we noticed that most people using BackupBuddy are simply storing an extra copy on the same server, which doesn’t add much protection against data loss. If you make your own backups, you should ideally copy them to your own computer, or to an external location like Dropbox.