A PHP vulnerability with a CVSS score of 9.2 that lets anyone execute code remotely without even logging in — and the official fix only covers 8.2 through 8.5. My server runs 5.6, which has no patch and no backport. This morning I only wanted to confirm how badly I was affected. But one thing led to another, and I ended up giving the site legacy — stacked up and steadily gaining entropy for over a decade — a thorough slimming down.

Notes on deploying a TSRPC server on the Baota panel, including configuring an Nginx reverse proxy and fixing the issue where the Node.js project fails to start. Modify the Nginx configuration file, add CORS-related settings, and comment out the conflicting port listening configuration to ensure the service runs properly.