your: brand edit calm | personal | supportive Part of THE MALLARD EDIT family ↗
Website security, made simple.Seen the PHP headlines? Start here.

Brand thinking | Websites | Digital experiences

We make
businesses
clearer.

We bring a little more clarity to your brand, website and digital experiences, helping your customers understand what you do, feel a connection, and engage with you.
"It’s not about what you say, it’s about how your customers hear it"

Selected websites and digital experiences created by your brand edit
01/ 05

Four businesses. Four possibilities. But Just a Glimpse of what we can do

Explore Our Demos.

See how a distinctive website and a useful companion app can work together. Browse the menu, try a booking, plan your visit and discover the little extras that keep people coming back.

These businesses, reviews, offers and availability are fictional. Demo bookings take no payments, create no real reservations and send no emails. All apps open instantly, with no login or download.

Experience shaped while working with and influencing brands across technology, retail, lifestyle and creative industries.

CATCircuitMessThe Lobster PotMAXCases
your: brand edit

A little clarity from your: brand edit

Website security.
Let’s make it simple.

Seen the PHP headlines? Here’s what they mean, what to ask and where to start.

Checked against official guidance on 23 October 2026. Advice may change; the latest official notices are linked below.

The headlines do not mean your website has been hacked. Two serious security weaknesses have been found in PHP. Fixes are available, and asking your hosting provider to check your site today is a sensible next step.

You don’t need to know the technical answers. You just need to know who to ask.

First, what do the words mean?

PHP — software behind the scenes
PHP stands for “PHP: Hypertext Preprocessor”. Think of it as an engine that helps a website run. You don’t need to remember the name.
WordPress — a way to manage a website
It lets people add pages, pictures and posts. WordPress uses PHP underneath, so its hosting needs checking too.
Hosting and servers — where your website lives
A server is the computer that delivers your website to visitors. Your hosting provider looks after the service that keeps it online.
A vulnerability, a patch and an update
A vulnerability is a weakness someone could exploit. A patch is a repair, usually installed through a software update.

So, what has happened?

The two weaknesses could let an attacker run unwanted code on an affected server. PHP released fixes on 21 October. These issues concern PHP itself; updating WordPress or its plugins alone does not repair them.

Some hosts may already have applied the fixes. Ask yours to confirm, including whether the additional PHP guidance issued on 23 October needs action on your setup.

One small step. A useful answer.

Contact your hosting provider or whoever maintains your website. If you’re unsure which company handles what, start with the person who built it and ask them to point you in the right direction.

The words are ready for you.

Choose a message below. Copy it, add your website address and send it through your usual email or support channel. These buttons only copy text; they don’t send anything.

01 · Not sure whether this affects you?

02 · Ask your host to confirm the fixes

03 · If an update is still outstanding

Still not sure? We’re here to help.

Tell us what you’ve been told. We can help you understand the reply and work out your next step. Your hosting team can confirm the checks and changes on your particular server.

Let’s untangle it together →

Want to read the official advice?

These are the sources behind this guide. They contain more technical detail, so you can also share them with your website team.

General guidance, rather than a security assessment of your website.