Using PHP with WebSocket

Is it possible to use PHP with WebSocket? Let's figure out
16 October 2017   2958

Unfortuantelly, PHP is not designed to work with WebSocket. You can connect it, but your code will be full of while (true) and fsock_open . And you have to have access to the shell to run the WS-server with php-cgi. 

You need to choose a language that supports threads / asynchronous communication. Now on the top is Node.js. In addition, better use dedicated libraries to support older browsers, etc. If you want to create one-to-all communication (eg chat, broadcast messaging), go one step further and use one of the Bayeuximplementations, for example: Faye.

The mod_proxy_wstunnel extension adds an extra layer to the WS server. Depending on the configuration, it can support DDoS, queue, load-balancing, local port swapping, and https support. But better use this for nginx.

Websockets are events, and PHP is poorly managed with it.

Hackers to Use XSS Vulnerability in WP Plugin

Online stores are the victims of hacker attacks, but the patch is already available
14 March 2019   1514

Hackers install backdoors on websites of online stores through XSS vulnerability in WordPress plugin. Only administrators and privileged users can use the plugin - this allows you to run malicious code with high-level rights.

The plugin Abandoned Cart Lite for WooCommerce has more than 20 thousand downloads, it is widely distributed. The developers have already released a patch in version 5.2.