DEV Community: HostingSeekers

Title: Emergency PHP Patch Released for "PHP2Shell" Critical RCE Flaws (CVE-2026-109618 & CVE-2026-109619) — CVSS 9.2

HostingSeekers — Mon, 26 Oct 2026 10:31:00 +0000

Hey everyone,

The PHP security team has dropped emergency security releases (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35) to address two critical Remote Code Execution (RCE) vulnerabilities nicknamed PHP2Shell.

If you manage web servers running PHP, you'll want to check this immediately. Here is a quick breakdown of what's happening:

The Core Details
The Flaws: CVE-2026-109618 (out-of-memory corruption during request initialization) and CVE-2026-109619 (stale global state survival).

Severity: 9.2 (CVSS v4.0) for both.

Impact: Unauthenticated attackers can potentially achieve remote code execution, leading to complete server/site takeovers.

How it went down: Technical details and an exploit tool screenshot leaked ahead of the official drop via security firms like watchTowr and Sansec, prompting an accelerated emergency rollout.

Fixed Versions
PHP 8.5.12

PHP 8.4.27

PHP 8.3.36

PHP 8.2.35

What You Need to Do Right Now
Update immediately: Grab the latest patched version through your package manager or directly from PHP's official downloads.

Restart workers: Don't forget to restart your PHP-FPM, Apache/mod_php, or other worker processes after updating.

The PHP 8.1 & Older Problem: Since PHP 8.1 and earlier are past their active support lifecycle, they won't get standard official updates. If you're stuck on older versions, check with your OS vendor/LTS provider for backported fixes or consider minimal source backports if you build from source—or better yet, plan an immediate upgrade.

Temporary Mitigations (If you can't patch instantly): While not a fix, PHP recommends setting session.upload_progress.enabled=0 in php.ini (not via ini_set) and configuring rigid memory limits (memory_limit=-1 via admin value) to help mitigate known attack vectors.

Full details on the breakdown, exploit vectors, and checklists can be found in this write-up.

Has anyone run into any upgrade hiccups yet? Check your servers and stay safe out there!

How to Connect and Use Laravel with an MCP Server

HostingSeekers — Thu, 15 Oct 2026 17:54:42 +0000

The Model Context Protocol (MCP) is an open standard that gives AI models a structured way to interact with external applications—not through a messy chatbot wrapper, but via actual function calls directly into your codebase.

Building an MCP server in Laravel lets you tap into patterns you already know. Instead of implementing a protocol spec by hand, you get Artisan scaffolding, automatic dependency injection via the service container, built-in validation rules, and authentication support.

Here is a practical guide on how to set up, build, and test an MCP server inside a Laravel application. For the full, detailed walkthrough, you can also check out the complete HostingSeekers guide on connecting Laravel with an MCP server.

Prerequisites
Before you begin, ensure your environment meets the following requirements:

Laravel 12.x or 13.x

PHP 8.2 or higher

Composer

An MCP-compatible client for testing (such as Claude Desktop) or the built-in Artisan inspector tool.

Step 1: Install the Laravel MCP Package
First, pull the official package into your project using Composer:

Bash
composer require laravel/mcp

Next, publish the dedicated routing configuration:

Bash
php artisan vendor:publish --tag=ai-routes

This creates a new routes/ai.php file in your application. MCP traffic has distinct protocol expectations and security requirements, so keeping it isolated here prevents it from mixing with your standard web.php or api.php routes.

Step 2: Create Your First MCP Server
Scaffold a new server using the Artisan command:

Bash
php artisan make:mcp-server WeatherServer

This generates a server class in app/Mcp/Servers/WeatherServer.php that extends Laravel MCP's base Server class:

PHP

<?php

namespace App\Mcp\Servers;

use Laravel\Mcp\Server\Attributes\Instructions;
use Laravel\Mcp\Server\Attributes\Name;
use Laravel\Mcp\Server\Attributes\Version;
use Laravel\Mcp\Server;

#[Name('Weather Server')]
#[Version('1.0.0')]
#[Instructions('This server provides weather information and forecasts.')]
class WeatherServer extends Server
{
    protected array $tools = [
        // CurrentWeatherTool::class,
    ];

    protected array $resources = [
        // WeatherGuidelinesResource::class,
    ];

    protected array $prompts = [
        // DescribeWeatherPrompt::class,
    ];
}

Note on #[Instructions]: The AI client reads this attribute to understand how your server should be used. Write a clear description rather than a generic placeholder so the model knows when to reach for your server.

Step 3: Register the Server in routes/ai.php
Depending on whether your client is local or remote, register your server appropriately inside routes/ai.php:

For HTTP (Remote/Production): Use Mcp::web() so hosted AI clients can reach your application over a URL endpoint.

PHP
use App\Mcp\Servers\WeatherServer;
use Laravel\Mcp\Facades\Mcp;

Mcp::web('/mcp/weather', WeatherServer::class)
    ->middleware(['throttle:mcp']); %}

For Local Development: Use Mcp::local() if the client and server run on the same machine (ideal for local AI coding assistants).

PHP
Mcp::local('weather', WeatherServer::class);

Step 4: Build a Tool the AI Can Call
Tools represent the actions a model can invoke. Scaffold a tool with Artisan:

Bash
php artisan make:mcp-tool CurrentWeatherTool
Implement the tool by defining its execution logic and input schema:

<?php

namespace App\Mcp\Tools;

use Illuminate\Contracts\JsonSchema\JsonSchema;
use Laravel\Mcp\Request;
use Laravel\Mcp\Response;
use Laravel\Mcp\Server\Attributes\Description;
use Laravel\Mcp\Server\Tool;
use Laravel\Mcp\Server\Tools\Annotations\IsIdempotent;
use Laravel\Mcp\Server\Tools\Annotations\IsReadOnly;

#[Description('Fetches the current weather forecast for a specified location.')]
#[IsIdempotent]
#[IsReadOnly]
class CurrentWeatherTool extends Tool
{
    public function handle(Request $request): Response
    {
        $location = $request->get('location');

        // Fetch weather data...
        return Response::text("The weather in {$location} is sunny.");
    }

    public function schema(JsonSchema $schema): array
    {
        return [
            'location' => $schema->string()
                ->description('The location to get the weather for.')
                ->required(),
        ];
    }
}

Pro-Tip on Descriptions and Safety Annotations
Descriptions a %}re interfaces: The AI model reads #[Description] and the field descriptions to determine how to call your tool. Never leave them blank or generic.

Safety Annotations: Annotations like #[IsReadOnly], #[IsIdempotent], and #[IsDestructive] help clients understand what a tool does before execution, ensuring safer interactions—especially for tools that modify or delete data.


PHP
protected array $tools = [
    CurrentWeatherTool::class,
];

Step 5: Test Your MCP Server
Before connecting a live AI client, use the built-in Artisan inspector to verify your setup:

Bash
# For a web server registered at /mcp/weather
php artisan mcp:inspector mcp/weather

For a local server

php artisan mcp:inspector weather
This opens an interactive testing session where you can inspect your tools, check schemas, and fire test calls manually.

Web Hosting Companies Are Becoming Service Providers — Here’s What’s Changing

HostingSeekers — Mon, 29 Dec 2025 08:08:40 +0000

Web hosting companies are no longer just selling servers.

Over the past few years, a quiet but important shift has been happening in the hosting ecosystem. Hosting providers are increasingly expected to support things like:

WordPress maintenance and updates
Speed and performance optimization
Security hardening and malware cleanup
Custom development and integrations

For customers, this makes sense. They don’t want to manage five vendors for one website. They want hosting + support + development to work together.

For hosting companies, however, this creates a challenge.

The Reality Hosting Companies Face

Most hosting providers are infrastructure experts — not development agencies.

Yet customers often expect “full-stack support,” even when the hosting company doesn’t have in-house developers capable of handling:

Complex WordPress issues
Custom plugins or themes
Laravel or API-based applications
Ongoing maintenance beyond basic server support

Hiring and managing an internal dev team isn’t always practical, especially for small to mid-sized hosting companies. Freelancers can help in some cases, but consistency and long-term reliability are often issues.

This leaves hosting companies stuck between customer expectations and operational reality.

The Missing Link: Trusted Development Partners

What hosting companies actually need is not more tools — but trusted development partners.

Partners who:

Understand hosting environments
Can handle real-world production issues
Work as an extension of the hosting provider
Support ongoing maintenance, not just one-off projects

The problem is discovery.

Finding reliable development agencies that understand both code and hosting infrastructure is fragmented. Google results, freelance platforms, and generic directories don’t solve this well.

Why the Hosting + Development Connection Matters

When hosting and development teams work in isolation, the result is usually:

Blame-shifting during outages
Performance bottlenecks
Security gaps
Poor customer experience

When they work together:

Sites load faster
Issues are resolved quicker
Customers stay longer
Hosting companies can confidently offer managed services

This collaboration model is becoming essential as managed WordPress and maintenance plans grow.

Building for This New Reality

We built HostingSeekers originally to help users find reliable hosting providers. Over time, it became clear that hosting is only one part of the equation.

That’s why we expanded the platform to include service companies — development agencies that specialize in WordPress, Laravel, AI, Cloud, and DevOps — and understand the hosting ecosystem they operate in.

The goal isn’t to replace freelancers or in-house teams.
It’s to enable long-term, trusted partnerships between hosting companies, service providers, and businesses.

Where This Is Heading

I believe the future of web hosting looks like this:

Hosting companies act as solution providers
Development partners act as extensions, not vendors
Customers get one accountable ecosystem instead of multiple disconnected services

We’re still early in this transition, but the direction is clear.

If you work in hosting or development, I’m curious:

How are you seeing this shift play out?
What’s been the hardest part of hosting–development co

Top Black Friday & Cyber Monday Web Hosting Deals for Developers (2025)

HostingSeekers — Tue, 02 Dec 2025 08:23:00 +0000

webdev #blackfriday #hosting #productivity

It's that time of the year again! If you have a backlog of side projects waiting to be deployed, a portfolio that needs a refresh, or you're just looking to switch providers to save some cash, Black Friday is the best time to lock in server costs.

I dug through the deals on HostingSeekers to find the ones most relevant to developers—from VPS and Cloud instances to Managed WordPress hosting.

Here are some of the best picks for 2025:

☁️ Cloud & VPS Deals (Best for App Deployment)

Cloudways (Managed Cloud) If you want the power of DigitalOcean, AWS, or Google Cloud without the sysadmin headaches, Cloudways is a go-to.

The Deal: 50% OFF for 3 months on all plans + 50 Free Migrations.

Coupon Code: BFCM5050

Why it's good: Great for quickly scaling apps without managing the underlying OS.

Kamatera (Performance Cloud) Great for developers who need raw performance and customization.

The Deal: $100 Free Credit / 30-Day Free Trial on VPS Cloud Hosting.

Coupon Code: (No code needed - Auto-applied)

Why it's good: You can spin up servers in seconds. The $100 credit is excellent for testing heavy workloads.

Hostinger (Budget VPS) Hostinger has become very popular for affordable VPS solutions.

The Deal: Extra 12% Discount on VPS Plans (on top of existing up to 67% off).

Coupon Code: SEEKERS12

Why it's good: Very cheap entry point for a Linux VPS if you want to practice server management or host lightweight Docker containers.

🛠️ Shared, Reseller & specialized Hosting

BigCloudy (NodeJS & cPanel) They explicitly mention support for NodeJS, which is a huge plus for JS developers.

The Deal: 77% OFF on Hosting Plans.

Why it's good: Good savings if you need a specific environment like Node or WordPress managed hosting.

Verpex (Reseller & Shared) If you host sites for clients, this is a massive discount.

The Deal: Up to 90% OFF on Reseller & Shared Hosting (First Order).

Coupon Code: MOVEME

HostPapa The Deal: Up to 50% OFF on all plans.

Coupon Code: BFCM25

🎁 Domains & Other Mentions
HostEver: Get a free .com domain with any Linux hosting pack using code COMFREE.

HostMeNow: First month free on monthly plans with code Safe.

Preparing for 2026: What the cPanel, Plesk & WHMCS Price Hikes Mean for You

HostingSeekers — Sun, 23 Nov 2025 04:07:01 +0000

As we approach 2026, it’s time to face a reality many in the web-hosting and reseller space have been quietly preparing for: major licensing platforms are increasing their prices. That includes cPanel, Plesk and WHMCS. At HostingSeekers we’ve pulled together the updated pricing plus implications and actionable steps — so you’re not scrambling when January 1 hits.
(Source: HostingSeekers blog)
HostingSeekers

🧾 What’s Changing
cPanel

cPanel’s pricing for 2026 is set to rise across all tiers: for example “Solo” moves from $26.99 up to $29.99, “Admin” From $32.99 to $35.99, “Pro” from $46.99 to $53.99, and “Premier” from $65.99 to $69.99.
HostingSeekers

On top of that, the “per account over 100” charge for Premier goes from $0.45 to $0.49.
HostingSeekers

cPanel has been steadily raising rates since 2019.
HostingSeekers

Plesk

While exact 2026 pricing hasn’t been fully published yet, Plesk has signalled an increase and many in the community anticipate it will affect smaller hosts and resellers disproportionately.
HostingSeekers

WHMCS

WHMCS’s new pricing structure from Jan 1 2026 moves the “Plus” tier (up to 250 clients) to $34.95/month; “Professional” (up to 500 clients) to $54.95/month.
HostingSeekers

For larger client volumes: Business 1,000 clients at $84.95/month, Business 2,500 at $179.95/month, up to Business 50,000 and even “Unlimited”.
HostingSeekers

*Why You Should Care
*
Thin margins are at risk: Many resellers operate on small margins. When licensing costs go up, either you absorb the hit or pass it on to your customers — either way, profitability or competitiveness may suffer.
HostingSeekers

Account volume matters: If you manage hundreds or thousands of accounts, the per-account incremental cost adds up quickly.

Client push-back potential: If hosts raise their prices, end-customers may question the value or look for alternatives.

Tool-chain dependency: If you rely heavily on WHMCS for billing + automation, or on cPanel/Plesk for hosting control panels, you’re locked in unless you plan ahead.

*Your Game Plan
*
Here’s a suggested plan you can follow (or customise) to navigate this transition smoothly:

Audit your current licensing footprint

Count how many accounts/licenses you hold with cPanel, Plesk, WHMCS.

Map which tier you’re in today and project where you’ll end up under the new pricing.

Determine how much your costs will increase (roughly).

Communicate early with stakeholders

Let your end-customers (e.g., resellers or site-owners) know licensing changes are coming and may affect pricing or offerings next year.

Be transparent: “Because our upstream tools are increasing, we’re reviewing how that impacts our plans.”

Explore alternatives / cost-mitigation strategies

Look at cheaper or open-source alternatives for control panels (especially if you’re small or starting out).

Consider whether you can negotiate volume discounts with your licensing vendor or move to a different model.

Analyse whether you can rationalise: fewer accounts, more efficient usage, or reconsider tiers.

Adjust your pricing and business model

If your costs go up, you’ll likely need to adjust your plan pricing (or the value you deliver).

Consider offering tiered plans with different feature-sets to offset the net increase.

Use the cost-increase as an opportunity to upsell value (e.g., added management, security, backups).

Monitor the market & timing

Keep an eye on how your competitors respond. Will they absorb or pass on the cost?

The date to watch is January 1, 2026: that’s when the new pricing for these licences kicks in.
HostingSeekers

Decide your cut-off date for existing plans before new pricing applies (e.g., “Lock in old pricing if you sign up before 31 Dec”).

Introducing Managed WordPress Hosting on HostingSeeker’s Marketplace

HostingSeekers — Thu, 17 Nov 2022 09:08:25 +0000

Of all the hosting plans available online, WordPress Hosting is preferred by users worldwide. But this also might mean logging in to WordPress every time you have to make any updates or changes to your site. Imagine having to do this through a lengthy process! Additionally, if you have multiple hosting plans, this process can be pretty tedious.

Therefore, we recommend using a managed WordPress hosting platform to save your time and prioritize your tasks. As always, you can count on HostingSeekers not just for hosting needs but for managing your hosting plans as well.

With a motivation to serve our users and make their user journey seamless, convenient and efficient, we are happy to introduce Managed WordPress Hosting Tool in the HostingSeekers marketplace.

What is Managed WordPress Hosting?

Managed WordPress Hosting is a plan or a tool to help you with managing your WordPress site. The idea is to help those new to hosting so they don’t have to manage the technical aspects of WordPress hosting and to improve the process for a better user experience so that users don’t have to spend time improving the performance of the website.

Who can benefit from Managed WordPress Hosting on HostingSeekers?

This tool is best suited for bloggers, developers and website owners.

Managed WordPress Hosting tool by HostingSeekers is a pocket-friendly solution, especially for someone who is a new blogger, developer and website owner and needs to optimize their experience of managing their hosting plans through a single platform so they can focus their time and effort on their website’s growth.

So if you are looking for ease of operating your WordPress website Managed WordPress Hosting on HostingSeekers is for you.
What Makes Managed WordPress Hosting Tool on HostingSeekers Unique?

Managed WordPress Hosting Tool on HostingSeekers is user-oriented and strives to fulfil most of the users’ requests in a minimum number of clicks, including just a single click for most of the changes, directly through the HostingSeekers dashboard. This way the user doesn’t need to log in to their individual hosting platforms every single time and can manage all their plans through the HostingSeekers dashboard.

Top 5 features of HostingSeekers Managed WordPress Hosting

Here are the top features you can expect from Managed WordPress Hosting Tool in HostingSeekers Marketplace:

One-click WordPress Install: Installing WordPress can be tedious involving downloading and uploading the WordPress package to your hosting account, configuring and then installing it. With HostingSeekers’ Managed WordPress Hosting, users can now install and log in to WordPress with just one click through HostingSeekers admin. This helps to save time for users and makes the overall process more optimized.
Instant WordPress Updates: WordPress updates have never been more convenient. Whether it is a theme, a plugin or any other feature update, you can update WordPress directly through the HostingSeekers dashboard without having to log in to the WordPress dashboard. This means all users need to do is log in to their HostingSeekers account and manage all their updates at once within minutes.
Manage Plugins: If your website requires multiple plugins to improve its functionality and efficiency, managing plugins can be challenging. With HostingSeekers, users can activate, deactivate and update plug-ins directly through the HostingSeekers platform without any hassles. You don’t need to login into your WordPress account every time you need to manage your plug-ins.

Website Changes Through a Single click: Use the HostingSeekers dashboard to create a single staging site for all site changes. You can test all the changes you’d want to apply and fine-tune them till you feel confident about them. Once the changes have been completed, users can push changes live with a single click. You won’t have to create multiple staging sites every time you need to make updates to your existing sites.
Modify Users: You can create multiple users and sub-users in the HostingSeekers admin dashboard easily in a few steps instead of having to go through various logins for modifying your user and sub-user list. HostingSeekers managed hosting enables you to customize your WordPress user list in the most efficient way possible.

Conclusion

If you are new to WordPress hosting, finding the right hosting plan is just step one. Whether you have a single or multiple blog(s) or business website(s) or are a developer, you can use HostingSeekers to find the best WordPress Hosting plans suiting all your work/business needs. If you want to automate most of your process and focus on growing your business, HostingSeekers recommends selecting a Managed WordPress Hosting platform. With a single click installation and updates, HostingSeekers’ Managed WordPress Hosting is your best bet. Users can save their time and effort and channelise them on the productivity of their websites.