Skip to content

Security update: All Skyrack servers are running patched PHP versions, protecting client sites against CVE-2026-109618 and CVE-2026-109619.

PHP security update: your questions answered

Are Skyrack servers protected?

Yes. All Skyrack servers run CloudLinux and are running the latest patched PHP packages, protecting client sites against the two critical PHP vulnerabilities announced on 21 October 2026 (CVE-2026-109618 and CVE-2026-109619).

Why does my site show an older PHP version number?

The PHP project fixed the vulnerabilities in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Our servers use CloudLinux’s PHP builds, which carry the same fix as a backport and keep their own, lower version numbers.

For example, CloudLinux’s patched PHP 8.4 reports 8.4.26 rather than 8.4.27. A lower number does not mean your site is vulnerable.

What is backporting?

Backporting means taking a security fix from a newer release and applying it to the version already installed. The vulnerable code is fixed, but the version number stays the same. It is standard practice for enterprise Linux vendors, including CloudLinux, Red Hat and Debian.

What about older PHP versions, like 7.4 or 8.1?

The PHP project does not release updates for PHP 8.1 and older. CloudLinux provides patched builds of older PHP versions through its Hardened PHP service, so sites on those versions are covered too.

My security scanner says my PHP version is vulnerable

Many scanners judge only by the version number, so they cannot see backported fixes and report a false positive. The reliable check is the package changelog, which lists the CVE IDs that have been fixed. If you need confirmation for an audit or a client, open a support ticket.

My site is showing a WordPress or PHP error

Some sites were affected by the updates we applied across hosting accounts. Open a support ticket with your site address and our team will resolve it.

Further reading

OpenCart Hosting
Australia

Run your OpenCart store on Australian servers, with the PHP, MySQL and SSL it needs and your business email on the same account.


  • 100% Australian Owned and Operated
  • Affordable Premium Plans from $4.98 per month
  • Transparent Pricing with No Hidden Fees
Explore Our Hosting Plans
900+WordPress Websites Hosted Locally
100'sHappy Customers Across Australia
14Years Hosting Small and Medium Business
100%Australian Owned and Operated

OpenCart hosting for Australian stores

OpenCart is a PHP and MySQL shopping cart, so it runs well on cPanel hosting.

Our plans give it LiteSpeed, Enterprise SSD storage and a choice of PHP versions, on servers in a Sydney data centre close to your Australian customers. A free SSL certificate keeps the checkout on HTTPS, and backups run hourly through the day in case an extension or theme update goes wrong.

Included with every plan

  • PHP selector and multiple PHP versions
  • MySQL (MariaDB) databases and phpMyAdmin
  • LiteSpeed web server
  • Cron jobs for scheduled tasks
  • Free SSL certificates
  • Hourly off-site backups
  • Email accounts on your own domain
  • Australian based data centre
OpenCart hosting FAQ

Questions we get asked

Does OpenCart run on your hosting?

Yes. OpenCart needs PHP and a MySQL database, both of which are included on every plan. The PHP selector lets you choose the PHP version and extensions your OpenCart release asks for.

How do I install OpenCart?

Create a database in cPanel, upload the OpenCart files, and run the OpenCart installer in your browser. If you get stuck, contact us and our team will point you in the right direction.

Which plan suits an OpenCart store?

CP 5GB is a sensible start for a live store, as it has two CPU cores and 2GB of memory. Larger catalogues and busier stores suit the 10GB plans and above. If a store outgrows shared hosting, a managed VPS gives it dedicated resources.

Can you move my existing OpenCart site to Skyrack?

If your OpenCart site is on cPanel hosting now, our team can migrate one cPanel account per hosting service free of charge. If it is on another kind of hosting, ask us and we will tell you what is involved. See how our migrations work.

Where is my site hosted?

On servers in a Sydney data centre. Skyrack is Australian owned, with our team operating between Sydney and Adelaide. Our DNS network has nodes in Sydney, Melbourne, Perth and Adelaide.

Can I get a refund if it is not right for me?

If you ask within 30 days of placing your order, we refund your hosting payment in full to your original payment method. Request it by opening a ticket with our Accounts and Billing department. Domain names, SSL certificates and licences are not refundable. Refunds are subject to approval under our terms of service.

Not sure which plan suits your OpenCart online store?

Tell us what you are running and how busy it is, and our team will recommend a plan.

Contact us