2 sources·Updated 5h ago

Government Issues Circular on PHP Security Flaws

A circular has been issued by the Ministry of Digital Economy, directing all state institutions to address security vulnerabilities in websites and web applications developed using the PHP programming language. The circular has been sent to ministry secretaries, provincial council chief secretaries, commission secretaries, department heads, and heads of corporations, statutory bodies, and state-owned enterprises. More than 70 percent of state institution websites and web applications in Sri Lanka have been developed using PHP. The Ministry has warned that these vulnerabilities could expose systems to unauthorised access, data theft, and operational disruptions. The circular also outlines measures government institutions should take to minimise these risks.