There's a lot of publicity being given to a vulnerability in the PHP language. PHP underpins our site.
The vulnerability was patched in our site on Wednesday 21st October - the day of the announcement.
We were, in any case, unlikely to be attacked because so many large corporations use PHP and were much better targets. Even if someone managed to get through to our site your exposure is limited:
- We don't hold any credit card or bank information
- We do not store passwords
Andy