PHP 8.3.33 (running in prod) is vulnerable to the PHP2Shell RCE flaws
(CVE-2026-109618, CVE-2026-109619) fixed upstream in 8.3.36/8.4.27/8.5.12.
8.5 also has the longest remaining support window and matches the local
dev PHP version already in use.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Static-turned-PHP site for a pub in Marion, Indiana, with:
- Hero section with tiled brick-texture background
- Live-capable stat card (Facebook followers/reviews via Graph API,
with graceful fallback to config.php constants when no token is set)
- Open Graph / Twitter Card meta tags for social sharing
- robots.txt
config.php is gitignored (holds a Facebook Page Access Token once
generated); config.sample.php is the tracked template — copy it to
config.php and fill in values to run this locally or in deployment.
