Goodbye WordPress: Migrating chrishayward.co.uk to Hugo in under 2 hours with Claude Code

This week two critical remote code execution vulnerabilities in PHP itself were disclosed: CVE-2026-109618 and CVE-2026-109619, nicknamed “PHP2Shell”. These aren’t bugs in a plugin or a theme, they’re in the PHP core engine, so anything running on PHP (WordPress, Drupal, Joomla and the rest) was potentially exposed. Details leaked before the coordinated release, PHP pushed out emergency patches on 21 October, and there were already reports of active exploitation attempts. Yes, I patched. But it made me ask a question I’d been avoiding for a long time: Why am I still running a PHP server at home for a blog that is essentially an archive? ...

22 October 2026 · 7 min · Chris Hayward

Teams Direct Routing – Don't forget the NSG on your Azure SBC!

A very popular Topology for Direct Routing is to deploy a certified Session Border Controller into Microsoft Azure with SIP Trunks to Teams Phone System and SIP Trunks to a PSTN provider. There are Azure Datacentres all over the world, SBCs are rapid to deploy from Marketplace templates and SBC>Teams traffic effectively stays on the Microsoft CDN. Big carriers may have direct peering with Microsofts network, others will meet the Microsoft Network at Internet Exchanges (i.e. LINX in London). There’s no need to buy expensive WAN circuits and Compute costs for the SBCs are minimal, especially if on 3 year pricing. It’s just an awesome solution! ...

5 March 2021 · 4 min · Chris Hayward