Smash Your WooCommerce Hosting Problems... so you can do more important smashing. Girl dad, husband, nerd. Swears well with others.
Michigan, USA
Joined September 2017
- Tweets6.7K
- Following1.2K
- Followers1.6K
- Likes43.4K
You have got to be fucking kidding me.
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
October 21st The Great PHaPening Journal
9:00AM EST Update:
It doesn't look like any of these "mitigations" that every hosting company on the face of the planet is rolling out are gonna do jack shit to stop this. It's an exploit within PHP itself, not some esoteric configuration mishap.
Your order of operations should be:
1.) Be on Cloudflare behind their WAF (free tier gets the managed ruleset for free and there is nothing to configure but if you're on a paid tier make sure the managed ruleset is on and that you're not in Log Only mode) <--- comes straight from the CTO at Cloudflare
2.) Only accept connections from Cloudflare IPs
3.) If you can push to static and kill PHP do that
4.) If you are not on PHP 8.2 or later find a way to get there ASAP
5.) Run a manual backup now
I've shown executive teams of series B companies enterprise use cases for their tools in our WooCommerce offering and they've stared at me like Luke Wilson and I just popped out of a time capsule next to a former Fuddruckers.
"You mean... for WordPress? Is that even still a thing?!?"
WP missing the moment is Shopify-years-old now, AI is just the next round.
WordPress is completely missing the AI moment.
• It's open source, so coding tools can build on it. Perfect for aI.
• It's got 61,000+ plugins, so most use cases don't have to be reinvented.
• It can thrive because of tools like Cluade -- just like @omarchy is.
Since WP hasn't been AI-pilled, @johnturner and @syedbalkhi created WPVibe.
WPVibe lets you build and run WordPress sites using agents.
John showed me how it works in this video.
"Having said that, when the founders decide to do this, you have just got to get with the program. It is not your company.”
One of his best takes in the last six months.
Who is right and who is wrong: Day One or Valar?
“Everyone was saying that Day One was suing their portfolio company, which was completely wrong. It is Valar that wants declaratory judgment to move on.
Sequoia came in very aggressively, and everyone had to waive their pro rata so that they could get their ownership target. Then Valar let one of their investors invest because they are strategic.
This is the whole point: you are not supposed to play favourites. Having said that, when the founders decide to do this, you have just got to get with the programme. It is not your company.” @jasonlk
Love to hear your thoughts @shaunmmaguire @ChrisHarveyEsq @immad @JayKapoor
In the age of AI absolutely everything is possible... except for sleeping well at night.
For that you still need human beings who take responsibility for your shit and lose sleep on your behalf.
Liftoff 🚀
Unbelievably happy for you @ben_gabler !!!
Can't wait to see you in Miami.
After six years of building Rocket and coming off the one-year anniversary with hosting .com, my time at the company has come to an end.
When we launched Rocket in 2020, we bet on an edge-first approach to WordPress, with CDN and WAF in front of every site by default. That was unusual then and a major contributor to Rocket being named the 167th-fastest-growing company in 2025 on the Inc5000. Today, it's the standard across managed WordPress hosting, and I'm proud of the role Rocket played in pushing the industry in that direction.
Thank you to the team who built it with me and to the customers who trusted us with their business. As a substantial shareholder, I wish everyone at Rocket and hosting .com continued success with their mission in the web hosting space.
Thank you as well to the WordPress and hosting community. The relationships I've built here are the best part of the last six years, and they aren't going anywhere.
To be clear about what this is: I'm not retiring, and I'm not riding off into the sunset after an exit. The tech and investment community in Palm Beach County and South Florida is growing faster than ever, and I couldn’t be more excited for what the future holds in my own backyard.
I've been through the full arc of starting, scaling, and selling a company many times. I learned a lot from these experiences, and I have more energy, experience, and drive to help shape the future than I've ever had.
AI has changed what a small team can build and how quickly solutions can get to market, enabling small businesses to do far more than just think about web hosting and WordPress.
That's where my attention is going next. If you’re building something great, particularly in the AI space, let’s talk.
I clearly indicated that I wanted our spots to be flipped but the model can't help but make me a foot taller than @ben_gabler 😂
If you've ever wondered why your unlimited workers infinite scale horizontal managed WordPress thing never seems to actually work... it's because it's a literal cluster f@cK and it only "works" for sites that don't need it to work.
AKA: It doesn't work.
I think that Microsoft is actually really onto something with how shitty CoPilot is compared to literally everything else:
IT doesn’t want anyone to know how shitty they are at their jobs.
So everyone at corporate gets a harness so retarded the models don’t matter.
Imagine...
You're worth hundreds of billions of dollars and someone asks what what you would tell your younger self.
And with a straight face and a 1000-yard stare you tell yourself: DON'T DO IT!
Welp, back to work. How hard can it be? 🫠
If you buy a Main cabin seat on Delta airlines now you don’t actually get to pick your seat.
It’s randomly assigned, later.
But if you upgrade to Main Classic you can pick a seat, but you’ll pay more than Comfort Plus.
So you bump up to Comfort Plus… but you can’t pick your seat there either.
Because now it’s just Comfort, no plus. And you chose Comfort Basic, you idiot.
If you wanna pick your seat in the rows right behind First you now need Comfort Classic.
Which is almost as expensive as…
You get the idea.
I get that you wanna extract maximum rents and that using human psychology against customers is one (albeit disgusting) way to do so but this is fucking hella lame.
I have young children. I’m pretty sure that everyone involved, passengers and staff included, would like children to NOT be separated from their parents.
Especially not when we’ve already upgraded twice.
This should be made crystal clear on every single checkout page.
Especially after I have to select their ages from your stupid drop down on EVERY single checkout.
Thankfully (for your shareholders) you have hundreds of billions of dollars worth of “moat” in the form of airplanes that occasionally fall apart mid flight.
This shit is gross.
Millions and millions of miles/dollars later I don’t even know if I’m sitting next to my daughter.
Can’t wait for the change fee I’ll have to pay just to change from fully fucked and clueless to “We appreciate your loyalty Mr. Gallagher.”
The only silver lining here is that Delta is a dinosaur through and through.
The asteroid can’t get here fast enough.