the site is down while I figure out what to do about the recently reported PHP vulnerability