So, three websites I manage are all vulnerable to the PHP CVE.

Rather than clear my entire schedule for the day to remediate them, I've just opted to take them all offline and rebuild them on new infrastructure, with a few extra security tricks to minimize the damage from any one component getting popped like this.

I hate being forced into this situation, but it's easier than rebuilding after getting hacked.