The potential reach is substantial, but the 70% figure describes PHP's reported prevalence, rather than a confirmed count of compromised websites. Actual exposure depends on whether a server runs ...