Cyber chiefs tell websites to make critical safety update or go offline Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.