Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch ...